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In this paper we present a new method to show that a principal homo- 
geneous space of the Jacobian of a curve of genus two is nontrivial. The 
idea is to exhibit a Brauer-Manin obstruction to the existence of rational 
points on a quotient of this principal homogeneous space. In an explicit 
example we apply the method to show that a specific curve has infinitely 
many quadratic twists whose Jacobians have nontrivial Tate-Shafarevich 
group. 
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1 Introduction 

By Faltings' Theorem every curve of genus 2 defined over a number field k has only finitely many rational 
points. Several methods have been developed to find all rational points of a given curve C, such as the 
method of Chabauty-Coleman, the Mordell-Weil sieve, and combinations of these with covering techniques. 
All these methods require that we know the finitely generated abelian group J(k) of rational points on the 
Jacobian J of C, at least up to a subgroup of finite index. The torsion subgroup of J(k) is generally easy to 
find and the problem is therefore to find the rank r of J(k). The rank can be read off from the size of the 
group J(k)/2J(k) once the torsion subgroup is known. This group fits into an exact sequence 

-► J(k)/2J(k) -> Sel (2) (J/fc) -► ni(J/fc)[2] -> 0, 

where Sel (2) (J/fc) is the 2-Selmer group of J/k and III(J/fc)[2] is the 2-torsion subgroup of the Tate- 
Shafarevich group LU(J/fc) of J/k. The 2-Selmer group is computable (see [TS]). It is, however, not even 
known whether the Tate-Shafarevich group is always finite. Many papers have been devoted to exhibiting 
nontrivial elements of LU( J/k). In this paper we will follow a new method, suggested by Michael Stoll, which 
leads to the following result, our main theorem. 

Theorem 1.0.1 Let S be the union of {5} with the set of primes that split completely in the field of definition 
of the lines of V , which is 



-1, V2, y/E, yJ-3(l + V2), ^6(1 + ^5) 



Then for all n which are products of elements of S, the 2-part of the Tate-Shafarevich group of the Jacobian 
of the curve defined by 

y 2 = ~6n(x 2 + \){x 2 - 2x - l){x 2 + x - 1) 

is nontrivial. 

Our method uses the fact that every element of Sel^(J/A;) can be represented by an everywhere locally 
solvable 2-covering of J. A 2-covering of J is a surface X together with a morphism tt: X — > J, defined over 
k, such that over the algebraic closure k there exists an isomorphism Xj. = making the following diagram 
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commutative. 

Xj. Jg 

X Y 

The image of X in UI( J/fc) is trivial if and only if X has a rational point. Unfortunately, the easiest way 
to describe X in general is as the intersection of 72 quadrics in P 15 (see [7], section 2.3 for the statement). 
The isomorphism in the diagram above is determined up to translation of J by a 2-torsion point. Since 
multiplication by —1 commutes with these translations, it induces a unique involution t on X. Our strategy 
to prove that X has no rational points is to show there is a Brauer-Manin obstruction to the existence of 
rational points on X/l, or rather on a minimal nonsingular model V of this quotient variety. Note that V is 
a twist of the Kummer surface associated to J. 

The goal of this paper is twofold. In addition to proving the main theorem, we will analyze the geometry 
of V. By [7], chapter 16, the surface V can be embedded in P 5 as the complete intersection of three quadrics. 
In this reference this is only done when V is a trivial twist, but we will see that it holds for any twist. 
In this embedding, V contains 32 lines that generically generate the Neron-Severi group of V. We will 
also investigate the intersection pairing among these lines and exhibit 15 pairs of elliptic fibrations, each 
associated to one of the nontrivial 2-torsion points of J. In section [2] we will find the fields of definition of 
these lines and elliptic fibrations together with explicit equations for them. Then in section [3j we will use 
the information we have acquired in section [2] to exhibit an explicit example for which we are able to show 
a Brauer-Manin obstruction. This will be the most important part of the proof of the main theorem. 

We thank Michael Stoll for suggesting this project to us, Nils Bruin and Victor Flynn for helpful sug- 
gestions and explanations, William Stein for letting us use his computers, CRM in Montreal and MSRI 
for their hospitality and financial support, and the MAGMA group for developing their software. Also, the 
first author thanks the Nuffield Foundation for funding his research with a grant in their Awards to Newly 
Appointed Lecturers program, which supported him at CRM in the fall of 2005, and the University of Wa- 
terloo. The second author also thanks PIMS, Simon Fraser University, the University of British Columbia, 
and Universidad de los Andes. 

2 The geometry of the surface 

In this section we will investigate the geometry of the K3 surfaces that arise as the quotients of the principal 
homogeneous spaces under the Jacobian as described in the introduction. These K3 surfaces are twists of 
the Kummer surface associated to the Jacobian. In [7], sect. 16.2, it is remarked that the Kummer surface 
itself, i.e., the trivial twist, contains 32 lines. We will give a direct proof that all twists contain 32 lines. 
We will analyze the Galois action on the set of these lines. We will also describe certain elliptic fibrations, 
coming in pairs associated to pairs of roots of /. In the next section these will be used to find Brauer-Manin 
obstructions to the existence of rational points on some of these surfaces. In this section we will rarely 
use the fact that these K3 surfaces are twists of the Kummer surface. Given that our goal is to actually 
implement an algorithm, we will keep everything very explicit, including our proofs. We will, however, refer 
to [7] at times in order not to lose the context our work should be seen in. 

2.1 The surface 

Let A: be a field and W a vector space over k of dimension r > 1. We let P(W) denote the projective 
space (W — {0})/fc* associated to W. The homogeneous coordinate ring of P(JU) is the symmetric algebra 
S(W) = 0„> o S n (W), where W = Hom fc (W, fc) is the dual of W. Let (x u . . . ,x r ) be a basis of W. This 
basis yields an isomorphism P(W) — * P^ _1 that sends the element w £ W to [x\(w) : . . . : x r (w)]. Thus the 
Xi determine a coordinate system on P(W). The symmetric algebra S(W) is isomorphic to the polynomial 
ring k[xi, ...,x r }. 



2 



Let / G k[X] be a separable polynomial of degree 6, and set Af = k[X]/f. Consider 8 G A*f and set 
~ {q £ Af : 3co, ci, C2 such that dq 2 = c-iX 2 + c\X + Co} . 

Let Vf : s denote the subset of F(Af) corresponding to Vf.s- For any c E k* we obviously have A c f = Af, 
V c f,S = V/,<5, and V^./ a = V/^. We will often leave any subscript out of the notation that is clear from the 
context. Let (ao, . . . , a$) be the canonical basis of A associated to the basis (1, X, . . . , X 5 ) of A, so that 
any q G A can be written as q = 5Zt=o a i(<z)X l - As above the en determine a coordinate system on P(A). 
Writing out 5g 2 , we see that there are quadratic forms Co, . . . , C5 in the homogeneous coordinate ring S(A) 
of F(A), depending on / and 8, such that ai(5q 2 ) = Ci(q) for any q G A. We have g e V if and only if we 
have Ci(q) = for 3 < i < 5. This implies that V is an algebraic set in F(A), defined over k by the three 
quadrics C3, C4, and C5. We will express the C in a new coordinate system, inspired by [7J, Chapter 16. 

For any field extension k! of k we write Ay = A Cgifc viewed as a vector space over fc', so that we have 
W(Ak') = F(A)k'. We write A and V" for A^ and respectively, where k is a fixed algebraic closure k. Let 
SI denote the set of roots of / in k. Then I — fc(fi) is the splitting field of /. For w G SI we let <p u denote 
the /-algebra homomorphism A\ — > I given by X 1— > w. The y> w form a basis of A; and therefore induce a 
coordinate system on F(A[). 

Remark 2.1.1 Let (P w ) w be the canonical basis of A[ associated to the basis (i^ u ) u of A\. Then for each 
q G A\ we have 

Ci(«) = ai (5q 2 ) = a t ( Ys^q^Pu, J = ^a^PJ ¥ ^(%4< ? ) 2 , 

which implies Cj = ^ w a^P,,)^^ 2 , with J w = (p u (8). Note that we have <p w = X)i=o a;iai ' so we can 
also write the C in terms of the coordinates Oj. We can make the constants cii(P u ) explicit by setting 
P L = Y\een\{^ x ~ Tncn P; equals the Legendre polynomial P£(w) _1 P£. 

For all w G fi we set A w = tpu{PL) = P^(w) with P' as in Remark |2~L~T1 For j = 0, 1, 2, set 

Convention 1 From now on we will assume that the characteristic of k is different from 2. 

Proposition 2.1.2 The algebraic set Vf.s is a smooth, geometrically integral complete intersection of the 
three quadrics Qq, Q\, and Qi- It is a K3 surface of degree 8. 

Proof. Suppose / = X]j=o fi^ 1 ■ The set V is defined by the quadrics C3, C4, C5, so it is also defined by 
Qo = C 5 , Q' 1 =C i -hfs X C 5 , and 0^C 3 -/5/ 6 - 1 C4 + (/ 5 2 / 6 - 2 -/4/ 6 - 1 )C 5 . 

From the equations — /s/g -1 = 5Z W w an d f^fe 1 = 12^^, we find Q'i — Q% f° r * = 0, 1, 2. One checks that 
the quadrics define a smooth complete intersection. Fvcry smooth complete intersection of three quadrics 
in P 5 is a K3 surface of degree 8. □ 

Remark 2.1.3 The statement that V is a K3 surface also follows from the fact that V is the twist by 8 of 
the dcsingularized Kummer surface associated to the Jacobian of the curve given by y 2 = f; see [7J, Chapter 
16. 

Corollary 2.1.4 The Neron-Severi group NS(V) of V is free, finitely generated, isomorphic to PicV, and 
it has a lattice structure induced by the intersection pairing. 
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Proof. There are injections Pic V <—* Pic V and Pic V Pic V. As V is a complete intersection by 
Proposition [2X1 we find from [8], Thm. 1.8, that Pic V = 0, so NS(V) = PicV^. The Neron-Severi group 
of any projective variety is finitely generated, see [pj, exc. V.1.7. Also by [5], Thm. 1.8, we find that PicV is 
torsion-free, so it is free. In general the intersection pairing induces a lattice structure on the Neron-Severi 
group modulo torsion (see [IS]), which in this case is isomorphic to PicV". 

This theorem also follows from the fact that V is a K3 surface, as shown for characteristic in Prop. 
VIII. 3. 2 and on page 120 of [I], and for positive characteristic in Theorem 5 of [2|. □ 

Remark 2.1.5 Consider the net of quadrics pQo + qQi + rQ2 vanishing on V. The curve C in P 2 (p, q,r) 
corresponding to singular quadrics is given by the equation dot (p Mo + qMi -\-rM2) = of degree 6, where M, 
is the symmetric matrix corresponding to the quadratic form Qi. For any u> £ 17 the quadric hypersurfacc 
corresponding to any point on the line p + ujq + uj 2 r = is singular at the point in W(Ai) given by tpg = 
for all 8 7^ uj. This implies that C consists of 6 lines. The 15 intersection points are parametrized by pairs 
(u>, V>) £ f2 2 with w / ^. The corresponding quadrics are given by Qunp = wi^Qa — (to + ip)Qi + Qi- The 
hypersurfacc given by is singular at every point on the line m^, given by tpg = for 9 7^ u>, ip. This 
hypersurface is a cone over a cone over a quadric in the P 3 obtained by projecting W(Ai) away from 
m u ^, and therefore contains two families of linear three-spaces. Each family cuts out a family of curves on 
V, given by the two quadrics Qo,Qi in these three-spaces. This yields two elliptic fibrations of V, both 
defined over a quadratic extension of k(u}ip,u> + ip). We will see later which extension this is. Note that the 
projection from m w w, induces a 4-to-l map from V to D u j,. The elliptic fibrations factor through this map. 
Since satisfies the Hasse principle this map may be used to obtain information about the arithmetic of 
V. 

Let k' be any field extension of k. For every z £ A* w , let [z] denote the automorphism of P(Ak') induced 
by multiplication by z. Note that [z] maps Vs isomorphically to V$ z -2, so if S is a square in Air, then 
is isomorphic to V\ over k! . For any commutative ring R let fi(R) denote the kernel of the endomorphism 
x 1 — ► x 2 of R*. The scheme Spec A[i]/(t 2 — 1) represents the functor from the category of A- algebras to the 
category of groups that sends R to n(R) in the sense that the elements of n(R) are parametrized by the 
maps from Speci? to Spec A[t]/(t 2 — 1) that respect the map to Spec A. Such a map corresponds to the 
image of t under the associated homomorphism A[t]/(t 2 — 1) — > R. Let fiA be the Weil restriction of this 
scheme associated to the extension A/k. Then \ia is a fc-scheme representing the functor that sends a field 
extension I of k to fi(Ai). Let ft, be the quotient of /ia by the automorphism that is induced by t 1— > — t 
on Spec A[t]/(t 2 — 1). Then for all field extensions I of k we have p,(l) = (fi(Aj)/(— 1)) G ', where Gi is the 
absolute Galois group of I. 

Lemma 2.1.6 The homomorphism At, — * Autfe'P(vlfe') that sends z to [z] has kernel k'* . It induces an 
infective homomorphism fl(k') —> Aut^' ■ 

Proof. Note that for z £ n(Ak)' the automorphisms \z\ and [—z] are equal, so the homomorphism jl(k') — > 
Autg Vfr is well defined and has image in Autfc' Vy . We may therefore assume that k 1 is algebraically closed, 
so that fl(k') = fi(Ak>)/{— 1). Let p denote the homomorphism z 1— > [z] in question. If p(z) is the identity, 
then we have z- 1 = 1 in (A k , - {0})/k'*, which implies z £ k'*. Set H v = {r £ Aut k > P{A k >) : t(V) = V}. 
Since [z] maps Vs to V^ 2 -2, the restriction of p to fi{A k i) factors through Hy- Because V is not contained 
in a hyperplane, the map H°(¥ 5 , Ops (1)) — > Ov(l)) is injective. As every element in Autfe' V k i is 

determined by its action on iJ°(P 5 , Ops(l)), this implies that the restriction map r: Hy — > Autfe' 14' is 
injective. Hence, the composition r o /z(Afc') — > Autfc' Vfe' has kernel kerp^ = (i(A k i) D k'* = {±1} and 
therefore induces the injective homomorphism already mentioned. □ 

For any £ £ fi(A k i) we write Q for the image of £ in /i(fc'), and [£] or [£] for the induced action by multiplication 
on V(A k /) and V k i. Let T be the Weil restriction of the scheme Spec A[t]/(t 2 — S) associated to the extension 
A/k and let T be the fc-scheme that is the quotient of T by the automorphism induced by t 1— > — t on 
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Spec A[t]/(t 2 — S). As for \xa and fi above, we can make the identifications 

T(l) = U G A l : i 2 = 6}, and f{l) = ({£ £ A T : £ 2 = 5}/([-l])f l . 

Clearly T is a fc-torsor under fiA, with the transitive free action of /i^(fc') = /i(^4fc<) on T(fc') given by 
multiplication in A*/. Similarly, T is a fc-torsor under /i. 
For any £ £ T(fc') the 2-dimensional subspace 

£ e = {f-^aX + t) : s,iefc'} 

of ^4fc' corresponds to a line in ¥(Ak>), defined over fc', which is contained in Vk> and which we will denote by 
Li£. Since = L-f, this implies that to each £ £ T(k') we can associate a unique line L^, namely = L^, 

where £ € T(fc') is a lift of £. Let A(fc') denote the set of all lines corresponding to some £ £ T(k'). Note 
that for any z £ fj,(A^,) the automorphism [z] maps to L^ z -i. This induces an action of /i(fc') on A(fc'). 

Lemma 2.1.7 The action of /i(fc') on A(fc') is transitive and free. 

Proof. Transitivity follows from the fact that the action of n(Ap) on T(fc') is transitive and the map 
T(fc') — ► A(fc') sending £ to L| is surjective and respects the action of /j,(Ak')- To show that the action is 

free, we may assume that fc' is algebraically closed. Suppose that for £ £ M(fc') we have = and let 
C £ /i(A^) be a lift of f. Then multiplication by C sends the subspace £^ to itself, so it also sends the 
subspace W = {sX + t : s,t £ fc'} to itself. In particular this implies that there are s,t £ fc' such that 
C • 1 = sX + 1. From the fact that £ • X £ W we then find s = 0, so £ = t is in fJ,(A k >) fl fc' = {±1}, which 
means £ = 1. We conclude that the action of //(fc') on A(fc') is free. □ 

Lemma 2.1.8 The map T(fc') — > A(fc') i/iai sends £ £o induces a bijection T(fc') — ► A(fc') i/*ai respects 
the action of /t(fc') and G(k/k). 

Proof. It is obvious that we obtain a surjective map T(fc') — > A(fc') that respects the action of /t(fc') and 
Gik/k). Injcctivity then follows from the fact that jl(k') acts transitively and freely on both T(fc') and A(fc'), 
as we saw in Lemma 12.1.71 □ 

Remark 2.1.9 Lemmas 12 . 1.71 and 12.1.81 combined say that T(k) and A(fc) are isomorphic over fc as fc-torsors 
under jl(k). 

Convention 2 For the rest of this section we will suppose that I is contained in fc'. 

By the Chinese Remainder Theorem, the map 

fk>- A k , -> fc' 

wen 

induced by the ip u is an isomorphism, defined over I. Note that the induced Galois action on ® w fc' is given 
by acting on both the indices and the coefficients in fc'. In other words, for a £ G(k/k) we have 

1(0<- e n) = ( <r c.-iJ (agn . 

It follows that fx(Ak') and /t(fc') are isomorphic to @ W {±1} and (0 U {±1})/{±1} respectively. 

Lemma 2.1.10 Either the set A(fc') is empty, or it contains exactly 32 lines. 
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Proof. Since fi{k') has exactly 32 elements, this follows from Lemma \2. 1.71 



□ 



For 7 C 51 let (j denote the unique clement in pi{Ak>) with ^(C/) = ~~ 1 f° r w G 7 and (^(Cf) = 1 f° r 
uj ^ I. Note that we have (i = Cn\i- We will also denote this element by where tt is the partition 
{7, 51 \ 7} of 51. The map from the set V(£l) of all subsets of 51 to n(Ak') that sends 7 to Ci is a bijection. 
It induces a bijection from the set IT of partitions of 51 into two sets to p,(k'), sending tt to Ctt- The inverse 
7r: /i(fc') — > II of the latter bijection is given by 

tt(C) = {{w : MC) = !},{«> : MO = -!}}> 

where C G /x(Afc/) is a lift of £. For any n = {I, ,7} G II the automorphism [(^] = [£/] is defined over the 
fixed field of the group {g G G(k/k) : 9 ix = tt}. Note that acts on P(Ai) by sending the coordinate ip u 
to ±<y5 w . where the sign is negative if and only if we have lo G 7. 

For any co G 51 and £ G T(fc') we let P^^ denote the point on the line 7^ corresponding to the set 

-co) : sek'} C j4fc'. 

For any z G the map [z] sends P^ iU to 7^ z -i w . The notation distinguishes the points P% M , indexed 

by two subscripts, from the polynomials P u from Remark l2.1.1i which are indexed by only one. 

Proposition 2.1.11 For all co G 51 and all £ G T(fc') we have Cw-fj,^ = -Pfw Two lines L,L' G A(fc') 
intersect if and only if there exists an co G 51 swc/i £/«zi C w 7 = 7', m which case the intersection point is 
P^ tU = 7^/ iW , where £, £' G T(k') are such that L = and L' = L^. 

Proof. One easily checks ^((Cw — 1)(A^ — UJ )) = 0, so we have X — co = ( U (X — oj) for all to G 51. This implies 
that for all £ G T(k') we have CwT^,^ = u> = which proves the first statement. Let G T(fc') 

be such that 7 = 7^ and 7' = 7^. Suppose there is an to G 51 such that C^7 = 7'. Then 7 and 7' both go 
through the point P^ :UJ = CuP(,u, so they intersect. 

Conversely, suppose 7 and 7' intersect. Then the subspaces C% and C^i have a nonzero intersection, so 
we can choose s, t, s', t' G fc' such that £ -1 (sX + f) = ^'^ 1 (s' X + t') ^ 0. Applying ^ we find ^(C)(.scj + t) = 
s'w + 1' for all a; G 51, with £ = G fi(Ak'). After replacing £' by — £' if necessary, we may assume that 

there are at least three co G 51 with v?w(C) = 1- Then the equation sx + t = s'x + t' has at least three solutions 
in x, which implies s' — s and t' = t. From 7 ^ 7' we deduce £ 7^ 1, so there is an to with <^ w (£) 7^ 1- The 
equation (£) (so> +i) = s'o; +4' = so; + t then yields so; + 1 — 0. Since the equation sx + 1 = has at most 
one solution in x, this shows C = an d C>7 = 7'. □ 



Corollary 2.1.12 Tor any line 7 G A(fc') and any elements G fi{k') the lines QL and (J L intersect if 
and only if we have £ • C' = f or some co G 51. 

Proof. By Lemma \2. 1.71 the element £" = C ' C = C -1 ' C is the unique element in jj,(k') for which we have 
C" ■ C7 = C 'L. By Proposition 12.1. lTI the lines intersect if and only if we have £" = ( u for some co G 51. □ 

Put A = Aj,, V = V^., and A = A(fc). For any 7, 7' G A we say that 7 and 7' have the same or opposite 
parity if for the unique £ G fj-(k) with £7 = 7', the number of elements of the sets in the partition 7r(£) is 
even or odd respectively. For any co, ip G 51, let denote the subgroup of /i(fc) generated by £ w and 

Lemma 2.1.13 Let 7,7' e A fee different lines of the same parity. Then L and L' do not intersect and 
there are exactly two lines M and M' of the opposite parity that intersect both L and 7'. There are co, %/) G 51 
such that the set {7, 7' , M, M'} is an orbit of A under the action 0/$^^. 

Proof. Let 7 C 51 be such that £/7 = 7'. Then #7 is even, so 7 and 7' do not intersect by Corollary 
12.1.121 After replacing 7 by 51 \ 7 if necessary, there are u>,tl> G 51, such that 7 = From Corollary 

12.1.121 we deduce that the only lines that intersect both 7 and 7' are M = C U L and M' = Q,L. Indeed the 
set {7, 7', M, M'} is an orbit under □ 
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Remark 2.1.14 Remembering that V is a twist of the Kummer surface associated to the Jacobian J of the 
curve given by y 2 = f(x), we note that the lines of one parity correspond to the 16 blow-ups of the nodes on 
the singular surface J/(— 1). The lines of the other parity correspond to the tropes, see [7J, Sect. 3.7. The 
intersection numbers among these lines are well known. 

Definition 2.1.15 A 4-gon is a set {L,L',M,M'} of four lines, such that L and L' intersect both M and 
M'. 

By Lemma 12.1.131 any two lines of the same parity determine a unique 4-gon. All 4-gons arise in this 
way, because if the lines L and V both intersect a line M, then by Lemma |2 . 1 . 131 both L and V arc of the 
opposite parity than M , so L and L' have the same parity. 

Lemma 2.1.16 Let io,ip £ fl and any J, J C fl be such that the lines QL and CjL are not in the same orbit 
under Then the cardinalities of the sets ID (fi\ {u>, ip}) and JD (fl\ {lo, ip}) have different parity if and 

only if the line QiL intersects some line in the orbit under of the line C,jL in which case it intersects 
exactly one line in this orbit. 

Proof. Suppose that the cardinalities of the sets IC\(Cl \ {lo, ip}) and J n (fl \ {u>, ip}) have the same parity 
and that they are not equal. Let 7r = {ti\, 7^} £ II be such that C-n- = CiCj- Then QL and QjL are in the same 
orbit under if and only if we have 7T, C {lo, ip} for i = 1 or i = 2. We conclude 7^ (f_ {lo, ip} for i = 1, 2. 
Suppose that I fl (fi \ {lo, ip}) and J fl (fi \ {lo, ip}) have the same parity. Then 71", fl (fi \ {ui, ip}) 7^ has 
even parity for i = 1 and i = 2. It follows that for each £ S the sets in the partition 7r(CC/0) = '""(CCtt) 
contain exactly 2 elements of ft \ {uj, ip}, so QL does not intersect any of the lines ((jL in the orbit of QL 
by Corollary EXni 

Conversely, suppose that I fl (CI \ {ui,ip}) and J fl (0 \ have different parity. Then we have 

7T = {If U {<?}, 17 \ ({6>} U A')} for some G fl \ {lo, ip} and K C {w, V}- Then by Corollary the line 

^/A intersects exactly one line in the orbit of C,jL, namely C,kC,jL. □ 



Lemma 2.1.17 Let F\ be a 4-gon. Then there are exactly 12 lines in A that do not intersect any line in 
Fi . The set of these 12 lines can be partitioned into three 4-gons F2, A3, A4 and no other subset of this set is 
a 4-gon. The set of the remaining 16 lines can be partitioned into four 4-gons G\, G2, G3, G4 in such a way 
that, for every i,j £ {1,2,3,4}, each line in Fi intersects exactly one of the lines in Gj and each line in Gi 
intersects exactly one of the lines in Fj. For any different i,j £ {1,2,3,4}, no line in A,; intersects a line in 
Fj and no line in Gi intersects a line in Gj. There are uj,ip £ fi such that the Fi and Gi are the orbits of A 
under the action of . Lf L is a line in F\, then for i £ {2, 3, 4} there are 9,9' £ O \ {lo, ip} such that Fi 
is the orbit of Lggi, and for j £ {1,2,3,4} there is a9 £fl\ {LO,tp} such that Gj is the orbit of Lg. 

Proof. Let Lo,ip £ fl be such that Ai is an orbit under 4> w ^,, and let L denote some line in Ai. For any 
9,9' £ fl \ {lo, ip} the lines (ee'L and ^ee'L do not intersect any line in Ai by Lemma [2.1.161 This gives 12 
lines and one checks that the only three 4-gons contained in the set of these 12 lines are of the form 

{C0i0 2 -k> C93B4L, C, UJ e 1 B 2 L 1 (u)8 3 e 4 L} , 

for some permutation (9P)i of the elements in fl \ {u>,ip}. From the equalities (^g^g^L = C^ips 1 9 2 L and 
CuS 3 6iL = ^g 1 g 2 L we deduce that these 4-gons are also orbits under each containing an clement Lggi 

for some 9,9' £ fl \ {uj,ip}. The remaining 16 lines do intersect a line in Ai by Lemma [2.1.161 and the only 
four 4-gons contained in the set of these 16 lines are of the form 

{CeA Cwfi A (ipoL, Ctu^gL} , 

for some 9 £ fl \ {lo, ip}. Clearly these 4-gons are orbits under <i> w ^ as well. The remaining statements follow 
from Lemma |2. 1.161 □ 
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Definition 2.1.18 An exhibit is a quadruple S = {Si, S2, S3, S&} of 4-gons such that the Si are pairwise 
disjoint and no line in Si intersects a line in Sj for i j . A gallery is an unordered pair {Si, S2} of exhibits, 
such that UseSj an d Use5 2 are disjoint. For any gallery {Si, 82} we say that S2 is the complementary 
exhibit of Si . 

Remark 2.1.19 Lemma \2 . 1 . 1 71 says that each 4-gon is contained in a unique exhibit, which is contained in 
a unique gallery It also implies that the set of galleries is in bijection with the set of 15 pairs of different 
elements in fi. Figure [T] displays a gallery and the intersections among all the 32 lines in A. In Figure Q] we 
use the notation / for £/L for some fixed line L. The elements of fi are denoted by u>, ip, 1, 2, 3, 4. The two 
exhibits are made up by the 4-gons on the bottom and the left of the figure respectively. 




Figure 1: the intersections among the 32 lines in A 



Lemma 2.1.20 For each smooth curve C of genus g on a K3 surface, we have C 2 = 2g — 2. 

Proof. The adjunction formula gives C ■ (C + K) = 2g — 2, where K is the canonical divisor of the surface. 
The lemma follows from the fact that the canonical divisor of a K3 surface is trivial. □ 

Proposition 2.1.21 The elements of A generate a sublattice of the Neron-Severi group NS(V') of rank 17 
and discriminant 64. 

Proof. Lemma [2.1.201 implies that L 2 = —2 for all L G A. From Corollary |2. 1.121 we can deduce all other 
intersection numbers among elements of A. This gives a 32 x 32 Gram matrix of intersection numbers that 
has rank 17. The matrix also allows us to pick a basis of this sublattice. The Gram matrix with respect to 
such a basis turns out to have determinant 64. □ 

Proposition 2.1.22 The rank of the Neron-Severi group NS(V') equals 16 + rkNS(J), where J is the Jaco- 
bian of the curve given by y 2 = f(x). 
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Proof. The surface V is isomorphic to the desingularized Kummer surface associated to J by [7J, Chapter 
16. The statement therefore follows from [17], Prop. 1. □ 

Proposition 2.1.23 Generically the lines in A generate a lattice of finite index in the Neron-Severi group 
NS(F). 

Proof. Let J be as in Proposition 12.1.221 Generically we have rkNS(J) = 1, so rkNS(V) = 17. By 
Proposition 1 2 . 1 . 2T1 the elements of A generate a lattice of rank 17 as well, so this lattice has finite index in 
NS(V"). □ 

In fact the finite index in Proposition 12 . 1 . 2151 is equal to 1 as we will see in Proposition 12 . 1 . 301 The reason 
for stating that result separately is that one can compute the rank of the Neron-Severi group in explicit cases 
using methods from [19] and [20] . 

For any 4-gon S let D$ denote the divisor that is the sum of the lines in S. 

Lemma 2.1.24 Let S and S' be two A-gons in complementary exhibits. Then the image of D$ + D$' in 
Pic V is the class of hyperplane sections. 

Proof. Let L be a line in S and let oj, ip £ be such that S is the orbit of L under By Lemma [2.1.17[ 

the 4-gon S' is also an orbit under 4> w ^,. It follows from Lemma [2.1.161 that there is a 9 £ fi \ {oj, i/j} such 
that S' is the orbit of (gL. We deduce 

D S + D S ,=L + £,£, + Q,L + C^L + QL + C, Bu} L + Qg^L + (g.^L. 

One checks that for each L' £ A we have (D$ + Ds>) ■ L' = 1. For a hyperplane section H we also have 
H ■ L' = 1 for all L' £ A. Since the intersection pairing on Pic V is nondegenerate and the lines generically 
generate a lattice of finite index in Pic V by Proposition 12.1.231 we find that generically D$ + D$> is a 
hyperplane section. By specializing the transcendentals, this implies that D$ + D$> is always a hyperplane 
section. □ 



Lemma 2.1.25 Let S and S' be two A-gons in the same exhibit. Then D$ and D$> are linearly equivalent. 

Proof. Let S" be any 4-gon in the complementary exhibit, and let H denote a hyperplane section. Then 
by Lemma \2 . 1 . 241 both D$ and Ds' are linearly equivalent with H — D$" ■ □ 

Proposition 2.1.26 Let X be a K3 surface over a field and F a reduced and connected curve on X that 
satisfies F 2 = 0. Suppose further that the linear system \F\ does not have a base curve. Then there is an 
elliptic fibration X — > P 1 whose fibers are the elements of \F\. Up to an automorphism off 1 this fibration 
is unique. 

Proof. By the adjunction formula we have F ■ (F + Kx) = 2p a — 2, where p a is the arithmetic genus of F, 
but F 2 = and Kx = 0, so p a = 1. By the Riemann-Roch theorem for surfaces ([5], thm. V.1.6), we have 
h°(O x (-F)) - h^Oxi-F)) + h°(O x (K x + F)) = 1/2(F ■ (F - K x )) + l+ Pa = 2. Here h°(O x (F)) = 
because F is a nonzero effective divisor. Let us prove that ^(Oxi^F)) = 0. From the exact sequence 
— > Ox(— F) — > Ox — > Of — > of sheaves on X we obtain the exact sequence of cohomology groups 

H°(X,O x ) -> H (X,O F ) -> H\X,O x (~F)) -> H l {X,O x )- 

Since F is reduced and connected, H°(X, Op) consists only of sections constant on F, and so the map from 
H°(X,Ox) is surjective. On the other hand, H 1 (X, Ox) = because X is a K3 surface. It follows that 
H\X,O x {-F)) = as claimed, and therefore that h°(O x (-F)) = 2. 

The only maps whose fibers are elements of the linear system F are those associated to subseries of the 
complete linear system |_F|. Since Ox(— F) has a 2-dimensional space of sections, the only nonconstant maps 
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of this kind are those associated to the complete linear system. This map is a fibration, for by hypothesis 
there is no curve contained in all divisors in the linear system so F 2 = implies that no two fibers 
intersect. □ 



Lemma 2.1.27 For any 4-gon S we have D 2 S = 0. 

Proof. Write D$ = D\ + D^ + -D3 + -D4, where the Di are the geometric irreducible components of D$- By 
Lemma [2.1.201 each Di has self-intersection —2. Also, Di ■ Di + \ = 1 and Di ■ Di + 2 = 0, with indices read 
mod 4. The self-intersection of D$ is therefore 4 • — 2 + 4 • 2 = 0. □ 

Lemma 2.1.28 Let S be an exhibit. Then there is an elliptic fibration of V for which the lines in each 
4-gon S G S are the irreducible components of a fiber. Up to an automorphism 0/P 1 this fibration is unique. 

Proof. By Proposition 1 2 . 1 . 2l the surface V is a K3 surface. By Lemma [2 . 1 . 2 71 we have D 2 S = for any 4-gon 
S E S. By Lemma [2.1.251 the effective divisors D$ with S G S are all contained in the same linear system. 
The lemma now follows immediately from Proposition 12.1 .21)1 □ 

Remark 2.1.29 Since the exhibits come in pairs, so do the elliptic fibrations mentioned in Lemma [2. 1.281 
By Remark 12.1.191 these pairs of fibrations are parametrized by the 15 pairs of elements in fl. 

It is known that gencrically the lines associated to the nodes and the tropes on the desingularizcd Kummer 
surface generate the full Neron-Severi group (see Remark I2.1.14[) . Together with Propositions I2.1/2T1 and 
12.1.231 the following statement is slightly stronger. 

Proposition 2.1.30 7/rkNS(V) = 17, then the lines in A generate the full Neron-Severi group NS(V). 

Proof. Let L denote the sublattice of NS(V) generated by the elements of A. By Proposition 12. 1.211 the 
lattice L has finite index in NS(V r ). Suppose this index is not 1. Then from the equality disci/ = [NS(V') : 
L} 2 ■ discNS(V), we find it is divisible by 2, and discNS(V) is a divisor of 64/2 2 = 16. 

Consider the transcendental lattice Ty of V, which is the orthogonal complement of NS(V) in H 2 (V, Z). 
As the lattice H 2 (V, Z) is unimodular, we have | discT Y 7| = | discNS(V)|, so discTy is a divisor of 16 as well. 
However, since V is isomorphic to the Kummer surface associated to the Jacobian J of the curve y 2 = fix) 
(see Remark l2.1.3p . wc find from [T3], Prop. 4.3, that T v is isomorphic to Tj(2), the transcendental lattice 
of J, scaled by a factor of 2. Since T v has rank 22 — 17 = 5, its discriminant is divisible by 2 5 = 32. From 
this contradiction we conclude that the index does equal 1 . □ 



2.2 Fields of definition 

Recall that T(F) = {£ € Ap : £ 2 = 5} for any field F for which 5 is contained in Ap and that I = k(£l) 
is the splitting field of /. Also recall that if u G F is a root of /, then ip^ denotes the map Ap — > F that 
sends g(X) to g(u>). These maps induce the isomorphism ip: Ai — > © wG q I given by X 1— > {ip u (X)) u = (uj)^. 

Lemma 2.2.1 For any £ G T{k) and u>,tp G f2 we have ^^(P^.^) = if and only if = u>. 

Proof. This follows from the definition of and the fact that £ G A is a unit. □ 

For any object Y to which we can apply every Galois automorphism in G(k/k) we will say that Y is 
defined over the field extension k' C k of k if for all a G G(k/k') we have a Y = Y. The smallest field over 
which Y is defined will be called the field of definition of Y and denoted by k(Y). Note that every element 
of T(k') is defined over k' , even though it may be represented by an element in T{k') that is only defined 
over a quadratic extension of k' . Note that if Y = (yi, . . . , y n ) is a sequence, then k(Y) is the composition 
of all the k(yi). If Z = {21, . . . , z n } is a set, then k(Z) may be strictly smaller then the field of definition of 
the sequence (z±, . . . , z„), a field that we will denote by fc([Z]). 
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Lemma 2.2.2 Inside k we have I ■ k(L) = fc([A]) for all L E A. 

Proof. Suppose a 6 G(k/k) acts trivially on A. Then for all uj G fl and £ G the automorphism a fixes 
the intersection point P^ jW of and C^L^. The point P^ jW determines w uniquely by Lemma 12. 2. H We 
conclude that a fixes all ui G 0, so er fixes / and Z is contained in fc([A]). Clearly we also have k(L) c fc([A]), 
so we find I ■ k(L) C fc([A]). For every other V G A there is a ( e m(^z) such that (X = L'. As the 
automorphism [(] is defined over Z, we find that L' is defined over Z • k(L), so k(L') C Z • k(L). This holds for 
all V G A so wc find fc([A]) C Z ■ fc(L) and thus fc([A]) = Z ■ fc(£). □ 

For every to we fix a square root ^/5Z of <5 W = y w (<5) in fc, yielding also a fixed square root £o = 
f^ 1 {{V°\o)iA)en) °f 8. Note that with the Legendre polynomials P w of Remark 12.1.11 we can write £o = 
E w V^ujPu- We define the fields 

rnf = 1({\/S^ : w 6 !!}), and m = l{{\fa\ J ^Jo\i ) : u,^gfl}). 

The square root £o of 5 trivializes the torsors T and T under ha and /2 respectively, identifying £ G fJ-A(k) = 
n(A) with ££o G T(k). By Remark 12.1.91 the fc-torsors T(k) and A(fc) under p,(k) are isomorphic over Zc as 
well, identifying the class of £ in T(k) with the line L^. Just after Lemma [2 . 1 . 1 01 wc identified the subset 
I C f2 with the element G ^(fc). Similarly, we write = (j£o- We also set Lo = L^ and write 
Lj = (]Lq = L^j. Note that Li = Lq_j. 

Lemma 2.2.3 Pia: cr G G(k/k). Then °Zo = (f and only if I or O — I equals 

{°w : we!!, V<L = V^}- 
Proof. This follows immediately from Lemma [2.1.71 and the equation 

where J is the set given in the lemma. □ 



Lemma 2.2.4 We have fc([A]) = m. 

Proof. For every ip G O the element y^^o = XL V^V^^Pj is defined over to, where P w is the Legendre 
polynomial introduced in Remark [2.1.11 The line L corresponds to the subspace {( v /^^o) _1 (sAT + t) : 
s,t G to} of A rn , so io is defined over to as well and wc have k(Lo) C to. From Lemma 12.2.21 wc deduce 
fc([A]) C to. For the converse, consider a G G(k/k([A])). From Lemma 12.2.31 and the equation Lq = "Lq wc 
find that either we have a \fb\j = ^/S~^ for all u>, or we have a \fb\j = —^J~b\, for all u). In both cases we find 
that a acts trivially on to, so we also have to C fc([A]). □ 

Lemma 2.2.5 Let S = {iSi,^} he a gallery. Then there are u),ip G f2 such that we have 

k(S) = k(uj + ip,Mtp) and k(S±) — k(S2) = k(^uj + ip, u)ip, y/Se^j- 

een\{u,iii} 

Proof. Let uj, ip be such that the 4-gons in the Si are orbits under Write k' = k(u)+ip, ujip) and suppose 
we have a G G(k/k'). Then a fixes the polynomial (x — to)(x — ip), so it permutes u> and ip. Therefore, a 
permutes the orbits under fy^, which are the 4-gons in S\ U1S2 (compare Lemma |2.1.17|) . Since every 4-gon 
is contained in a unique gallery, this implies that a fixes S, so we have k(S) C k'. For the converse, suppose 
we have a G G(k/k(S)). Then a permutes the intersection points among any two lines in the same 4-gon 
in Si U S2. These intersection points are all of the form P^ }UJ or for some £ G T{k). By Lemma 12.2.11 
this implies that a permutes uj and ip, so it acts trivially on k' and we find k' C k(S), so k' = k(S). For the 
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second equality, set N = Y[een\{Lu v>} an< ^ consider a 6 G(k/k'). Then a fixes S, so it permutes Si and 
6>2, and a sends N to ±iV. Let n denote the number of 9 € O \ {w, V>} for which we have a y/5g = —^/S^g. 
Then er fixes N if and only if n is even. Let / C £1 be such that = Cr£o- Then we have n = #/H fi\ {w, -0} 
and ^Lo = Suppose that ri — or n = 4. Then Lo an d °Zo = Lj are in the same orbit under <f>ui/j, so 
in the same 4-gon in iSi U 1S2. By Lemma |2 . 1 . 1 71 each 4-gon is contained in a unique exhibit, so a fixes S\ 
or <!>2, and thus both. Now suppose n £ {1,2,3}. Then "Lq is in a different orbit under <& w ^, than Lq. By 
Lemma 12 . 1 . 161 the number n is odd if and only if the line Lq intersects some line in the orbit of "Lq, which, 
by Lemma 12.1.171 happens if and only if Lq and "Lq arc in opposite exhibits. We conclude that for all n 
the automorphism a fixes S± and £2 if and only if n is even, so if and only if a fixes N. This implies that 
fc(Si) = fe(«Sa) = k'(N). □ 



Remark 2.2.6 The first equality of Lemma [2. 2. 51 is not surprising as we already saw in Remark 1 2 . 1 . 1 91 that 
galleries are parametrized by pairs of elements in fl. Note that k' = k(S) = k{uo + ipjUjip) is the smallest 
field over which / factors as / = ^2/4, where fi has degree 2 and roots u> and ip. It is the field of definition 
of the 2-torsion point (to, 0) + (i/j, 0) — 2 • 00 on the Jacobian of the curve y 2 = f(x). If we set A4 = k'\X]/ f± 
and we let S' denote the image of 5 under the natural map — > A4 then the element Y[g V^e m Lemma 
12.2.51 is a square root of the norm N^/^S' of 6' from A4 to k'. The two elliptic fibrations associated to 1S1 
and 1S2 in Lemma [2.1.281 are also defined over the field k(S\) = fc(£>2) = fe'(-v/iVyi 4 /fc/ 5'). We will say that 
these are the elliptic fibrations associated to the pair (w, ip), or to the factorization / = 72/4- The 4-gons in 
S\ and ^2 that make up the fibers of these fibrations are orbits of A under the group In section [2~31 we 

will find explicit equations for these fibrations. 

Let Ai and A2 be the two maximal subsets 5* of A for which all lines in S have the same parity. 

Lemma 2.2.7 We have fc(Ai) = fc(A 2 ) = k(y/N(5j), where N = N A/k is the norm from A to k. 

Proof. Take a £ G(k/k). Let / C 51 be such that °£o = £1, and set n = #1. The automorphism a permutes 
Ai and A 2 , so it fixes both if and only if Lq and "Lq = Li have the same parity, i.e., if and only if n is even. 
Note that n also equals the number of u £ CI with a \fb\ } = —y/S^, so n is even if and only if a fixes the 
element fl u \fb\~, = y / N(S). We conclude that a fixes Ai and A 2 if and only if a fixes y / N(S), which shows 
that fc(Ai) = fc(A 2 ) = A;( v /iVW). □ 

Let Aut A denote the group of permutations of A that respect the intersection pairing. Let p: G(k/k) — > 
Aut A be the corresponding Galois representation. 

Lemma 2.2.8 The kernel of the representation p: G(k/k) — ► Aut A is G(k/m). 

Proof. This follows from Lemma T2.2. 41 □ 



Proposition 2.2.9 All extensions among the fields k C I C m C m! are Galois and we have exact sequences 

1 -> Gal(m'/m) Gsl(m' /I) -> Gal(m//) 1 
1 Gal(m/Z) Gal(m/fc) G&l{l/k) -> 1 
1 -> Gal(mVm) -► Gal(m'/Z) Gal(m/fc) Gal(//fc) 1. 

Proof. The extension l/k is normal because 2 is the splitting field of / over fc, and separable because / is. 
Since [ml : Z] = 64 = 2 6 , and we have assumed that charfc 7^ 2, the extension m'/k and all subextensions are 
separable. The group Gal(fc/m) is normal in Gal(fc/fc) because it is the kernel of p by Lemma T2.2.8I This 
means that m/k is Galois, and therefore so is m/l. Similarly, the group Gal(fc/m') is normal in Gal(fc//c) 
because it is the kernel of the representation Gal(fe/fc) — ► AutT(fc). This implies that m'/k is Galois, which 
also follows from the fact that m! is obtained from / by adjoining a square root of an element in I as well 
as the square roots of all conjugates of that element under Gal(Z/fc). Therefore, the extensions m'/m and 
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ml /I are Galois, too. The first two exact sequences are the standard short exact sequences of Galois groups 
associated to the double extensions k C / C m and I C m C m! '. They can be combined to give the last 
sequence. □ 



Example 2.2.10 Let F be any field and define the generic fields 



m' g 


= F(w 1 ,.. 


■ ! w 6 , d , . 


■ -,d 5 )[Ti, . 


m g 


= F(cj 1 ,., 


■ , ^6, d , . 


■ ■ , d§, {e,;£j 


h 


= F(u u ., 


■ , ^6, d , . 


■ ■ ,d 5 ), 


kg 


= F( Sl ,.. 


■ , s§, do, ■ ■ 


■,d 5 ), 



,T 6 ) /; Y^d,^ : l<j<6 



i=0 



l<i,i<6}), 



where uj±, . . . , u)q, d\, . . . , are independent transcendentals, Sj denotes the elementary symmetric polyno- 
mial of degree j in the variables u>±, . . . , u>e, and ej is the image of Tj in m' g . We have k g C l g C m g C m' g . 
Set 

6 

/ = Y[(X - w,-) = X 6 - Sl X 5 + s 2 X 4 - s 3 X 3 + s 2 X 4 - s 5 X 5 + s 6 G k g [X], 

and define A = k g [X]/f. By abuse of notation we will also write X for the image of X in A. Set S = 
Si=o diX 1 G A. The evaluation maps fj: A — > l g sending X to ujj induce an isomorphism ip: Ai g — > 
We have e| = Sj with <5j = so the fields Z g , m g , and m' g depend on k g , f and 6 exactly as the 

corresponding fields without the subscript g for "generic" did before, abbreviating ujj to j in any index. 
We will give explicit equations for the intersection points of the lines in A g in this generic situation. As in 
Remark I2.1.H let Pj denote the Legendre polynomial Pj = Yii^ji-X- ~ ^/(uij — u>i) € Ai g for 1 < j < 6. 
Then <p _1 sends (cj)® =1 to Ylj=i c jPj- Set £o = L P^ 1 {{ t j)j) = J2j=i e jPj- Then we have £q = (5. Let 
bji G F(ui\, . . . , uiq) be such that = ^ i=0 a^X 1 . In we have A_Pj = uijPj, so we find that the 
coordinates of the point P £o ,ui T in terms of the are given by the coefficients of 




Co- 1 (a -w r )=Y, tj\ x - "r)Pj = E e 7 x (^ - ^ = E I E e 7 x (^ - "r)&i< ] X\ 

0=1 3=1 

Multiplying all the coefficients by one of the ej 1 shows that the point P^ ,uj r is indeed defined over m g . 
All other intersection points are obtained by replacing some of the ej by their negatives and r by some 
r' G {1, . . . ,6}. By specialization, these formulas give explicit equations for the intersection points of the 
lines in A over any field. This also gives all the lines. Note that the group G&\(m' g /l g ) is isomorphic to 

©j=i Z/2Z, where the generator of the j-th component sends e,j to — ej. The group Gal(m' g /m g ) = Z/2Z 
embeds diagonally into Gal(m' g /l g ), sending every ej to — ej. Hence, the group T = Gal(m g /l g ) is isomorphic 
to (Z/2Z) 6 /(Z/2Z). The group Gal(l g /k g ) is isomorphic to 5*6. There is a section t' of the homomorphism 
Gal(m' g /k g ) — > Gal(7 g /fc g ) that sends an element o G Gal(Z 9 /fc g ) to the unique lift that sends the set 
{ei,...,eg} to itself. The composition i of i! and the restriction map Gal(m g /fc g ) — > Gal(m 9 /fc g ) is a 
section of the homomorphism G&\{m g /k g ) — > Gd^(l g /k g ). Through l the group Gal(l g /k g ) = Sq acts on T 
by conjugation. This action is induced by permutation of the components of ©j =1 Z/2Z = Gal(m g /^ g ) in 
the obvious way. Since the middle sequence of Proposition 12.2.91 splits in this generic case, we find that 
Gal(m 9 /fc g ) is isomorphic to the semidirect product T xi Sq, which has 32 • 6! = 23040 elements. 

Proposition 2.2.11 Generically, the representation p: Gal(k/k) — > Aut A is surjective. 

Proof. It suffices to show that p is surjective in the case of the generic situation of Example l2.2.10[ so suppose 
we are in that case. We will use the same notation as in Example 12.2. lOi including abbreviating ujj to j in 
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indices of lines and points. Take any r £ Aut A g and consider the line Lo = Le . Since T = Gdl(m g /l g ) acts 
transitively on A g , there is a a\ £ T with p(cri)(io) = T (Lo)- Then t' = p((7i) _1 T fixes Lo, so it permutes 
the six lines Lj that intersect Lq. The corresponding six intersection points are P^ , Uj for 1 < j ' < 6, so r' 
induces a unique permutation of the u>j by Lemma |2.2.1[ which corresponds to an clement ip £ Gal(7 g /fc g ). 
Set (72 = t>'(ip)- Then <T2 sends the set {ei, . . . , e§} to itself, so it fixes £o = e jPj as both the ej and the 

Pj are acted on according to their indices. This implies that p{o~2) fixes Lo, while it permutes the intersection 
points Pt; ,Ui in the same way r' does. Therefore r" = p(ct2) _1 t' fixes Lo and the six lines Lj. For i ^ j the 
line Ly is the unique line that intersects L,; and Lj that is not equal to Lq. This implies that r" also fixes 
Lij. Similarly, the line Ly> is the unique line that intersects both Ljj and L^ r that is not equal to L,;. This 
implies that r" also fixes Ly>. We conclude that r" is the identity, so r = piuxa-i) and p is surjective. □ 

By Lemma \2.2. 81 and Proposition ^. 2. ill the generic representation p g : T x Sq = Gal(m g /fc g ) — > Aut A g = 
Aut A is an isomorphism. We will denote the composition p g o t: S*6 — ► Aut A by t as well. 

It will be useful to have names for the elements of Aut A. For every set JcO, let si £ Aut A denote the 
permutation induced by [£/]. Note we have s/ = smj and s/ and sj commute for every /, J C f2. For any 
permutation c G 56 = Sym(f2), let t CT denote the permutation that sends L/ to Lai. For er, r £ Sq we have 
f CT o t T — t aT , and 

t a o s/ = s«i ot a . (1) 

Note that the action of 56 on A that we have defined depends on the choice of Lo, or the \/5^, just as the 
section i in Example I2.2.10l dcpcnds on the choice of the square roots ej of the Sj. We will state some of the 
following lemmas under an extra condition on Lo, knowing that the general case may always be obtained 
by changing some of the ySw to their negatives and changing the Lj and t a accordingly. By specialization 
of the generic Uj £ m' g of Example 12 . 2 . 1 01 to the u £ ft, and the 6j to the corresponding y/S^, we specialize 
k g , l g , m g , A g , and the corresponding generic representation p g to k, I, to, A, and p respectively. Let r denote 
the associated injective map from Gal(m/fc) to Gal(TO g /fc g ). Then we have the following commutative 
diagram. 

Gal(m g /fc 9 ) ^ Aut A g 



Gal(TO/fc) ^ Aut A 

Lemma 2.2.12 Let H be a subgroup of Aut A and let H g be the corresponding subgroup of AutA g . Then 
the fixed field of p~ x Ll is exactly the specialization of the fixed field of p~ 1 H g . 

Proof. Set H' = p~ l H and H' g = p~ x H g . By the commutative diagram above we have r _1 (i? 9 ) = H'. For 
every specialization k' of a subextension k' g of m g over k g , we have Gal(m/fe') = r _1 (Gal(m g /k' g )). In other 
words, the fixed field of H' = r~ l (H' g ) is exactly the specialization of the fixed field of H' g . □ 

For any uj,tp £ 0, let denote the group generated by s w and s^p. Then <i> w ^ acts on A through 
^uj-ip- For any exhibit S, let Gs denote the maximal subgroup of Aut A that fixes S and let G\s] denote 
the maximal subgroup that fixes all 4-gons in S. We will use Lemma [2.2.121 to find generators of fc([<5>]), 
the compositum of the fields k(S) for all 5 in some exhibit S. This field will be used in Section [2~3l to find 
explicit equations for the elliptic fibration associated to S in Lemma [2.1.281 

Lemma 2.2.13 For any exhibit S the group G5 has order 768 and the natural homomorphism from to 
the group Sym(5) of permutations of the 4-gons in S is surjective. Its kernel is G151. 

Proof. In the generic case of Example 12.2. 101 the field k g (S) has degree 30 by Lemma T2.2. 51 Therefore the 
group Gal(m s /fe g (<S)) has order 23040/30 = 768. By Lemma r2.2.8l and Proposition ^. 2. Ill the representation 



14 



p g : Gal(m g /k g ) — > Aut A g is an isomorphism, so we find that Gs has order 768 as well. Clearly the kernel of 
the homomorphism x : Gs — ► Sym(«S) equals G[s]- Let u> and tjj be such that the 4-gons in S are orbits under 
^uij), and set H = {t a : a E Sym(f2 \ {cj,ifj})} C Aut A. Each h G H sends orbits under the group to 
orbits under the same group, and as we have h(Lo) = Lq, the permutation h fixes at least one of these orbits, 
so it fixes the two complementary exhibits associated to the pair We deduce H C Gs- Without loss 

of generality we will assume that Lq is not contained in any of the 4-gons of S. Then by Lemma \2 . 1 . 1 71 for 
each 4-gon S in S there is a 9 E il \ {u>, ip} such that S is the orbit of Lg. It follows that each permutation 
of S is induced by a permutation of O \ {uj, ip}, so the restriction of \ to H is surjective, which implies that 
X is surjective. □ 



Lemma 2.2.14 Let S be an exhibit, let u>,tp G f2 be such that the A-gons of S are orbits under 3> w ,/,, and 
assume that Lq is contained in one of the 4- gons of S . Let #i,#2,$3,04 be the elements of \ {u> , ip} . Then 
G[ S ] is generated by s u , s^p, and t a for a G ( (uj i'), (9i 9 2 ){9 3 4 ), (6>i 6> 3 ) (6> 2 9±) ) ■ 

Proof. Set B = ( (6\ #2)(#3 #4), (6*i 6*3) (6 , 2 O4) ) and let H denote the subgroup of Aut A generated by s w , 
t(uj'4>)y an< i ta for a E B. Note that every ueB fixes uj and ip. By ([1]) this implies that for every h G i? we 
have h^ujiph" 1 — ^f^tp, so /i sends orbits under to orbits under i.e., /i permutes the 4-gons in S 

and its complementary exhibit. The elements s u , s^, and t^i/i) nx each of these 4-gons. Let 5* G iS be the 
4-gon containing Lq. We have t a (Lg) = Lq for all a G B, so /i sends 5* to 5 1 for all h € H. Let 5' G 5 be a 
different 4-gon. Then by Lemma \2 . 1 . 1 71 there are 9,9' E £l\ {u>, ip} such that sgg>(S) = S' . For each a E B 
we have 

t a (sgg>(L Q ))) = Sa { gg,)(t a (L Q )) = S„(gg,)(L Q ). 

For all u E B we have see' 5* = s^ggi)S, so i CT also fixes S". We conclude H C G[s]- By Lemma [2.2.131 the 
order of G\s\ equals 768/4! = 32 = #H, so we have H = G[s]- □ 

We can now find explicit generators of the field fc([<S]) in the generic case. 

Lemma 2.2.15 Consider the generic case of Examvle \2.2.Wl Let {S,S'} be a gallery, such that the A-gons 
of S are orbits under & U5LJ6 , and assume that Lq is contained in one of the A-gons of S. Set N = t\tiej,e^, 
a x = U)\U) A + uj 2 uj 3 , a 2 = ^1^3 + ^2^4. a 3 = UiLJ 2 + u> 3 w 4 , /?i = eie 4 + e 2 e 3) 2 = e i e 3 + e 2^4, and 
/3 3 = £^2 + 6364. Then k' g = k g (uj 5 + to 6 ,uj 5 u>Q, 0*1,0.2,0:3) is the unique S3- extension of k g ({S,S'}) = 
k g (u)$ + loq, (v^toe) contained in the Si-extension k g ({S,S'})(uJi, 102,1^3,^4). Set n g = k' g (N). Then the field 
k g ([S]) equals n g (/3i, f3 2 , (33) and is an S^-extension of k g (S) = k g ({S,S'})(N). Its unique S3~subextension 
is n g , and its unique quadratic subextensions of n g are generated by the Pi. 
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Proof. The first statement is elementary Galois theory. The field fc g ([6>]) is the fixed field of the group 
p~ 1 (G[s])- By Lemma 12.2.131 this field is an ^-extension of the fixed field k g (S) of Gs, which equals 
k g (uj5 + uj 6 ,uj 5 u} 6 , N) = k g ({S,S'})(N) by Lemma [2.2.51 Using Lemma [2.2.141 one checks that the group 
Pg 1 (G[s]) acts trivially on n g (0i,02, 3 ), so we conclude n g (0i, 02, 03) C k g ([S]). Since k' g and k g (S) intersect 
in k g ({S,S'}), we find that the compositum n g is an S^-cxtcnsion of k g (S), and therefore the unique S 3 - 
extension contained in k g ([S]). By elementary Galois theory and group theory this implies that there are 
three quadratic extensions of n g contained in k g {[S}). Note that /9~ 1 (s wlW4 ) and p g 1 ( 

s u>iu} 3 ) act trivially 

on n g (0i) and n g (02) respectively, but nontrivially on 02 and 0\ respectively. We conclude that 0i and 
02 generate two different quadratic extensions of n g . By symmetry, 03 generates a third. This implies 
[n g (0 1 ,0 2 ,0 3 ) ■ n g ] > 4 = [fc 3 ([5]) : n g ] , so we deduce that k g ([S]) = n g (0 1 , 2 , 3 ). □ 

The generators of the field fc ([£>]) in any other special case follow immediately. 

Corollary 2.2.16 Let the notation be as in Lemma \2.2.14\ Set N — -^61628364, ol\ = Q1Q4 + #2#3, «2 = 
&i&3 + O2O4, a 3 = 6162 + 0384, 0i = y/5iS4 + V82S3, 02 = VS1S3 + VS2S4, and 03 = ^8182 + V83S4. Then 
k g ([S]) equals 

k(uj + ip,wip, N, ai,a 2 , a 3 , 0i,02,0 3 )- 

Proof. Since k g ([S}) is the fixed field of the group p~ 1 (Gis]), it follows from Lemma 12 . 2 . 1 21 that it suffices 
to do this in the generic case. This is dealt with in Lemma [2. 2. 151 □ 



2.3 The elliptic fibrations 

Let S = {Si,S2, S 3 , S4} and S' = {S5, Se, SV, Sg} be complementary exhibits. By Lemma [2.1.281 there is an 
elliptic fibration V — > P 1 such that the 4-gons in S are some of the fibers. For any S £ S this fibration can 
be defined over the field k(S). It is possible, however, that none of the fibers is defined over the field k(S). 
This implies that the base of the family of fibers is not isomorphic to P 1 over k(S). As the base curve does 
become isomorphic to P 1 over some extension field, it is isomorphic to a conic. In this section we will give 
explicit equations, both for such a conic and for the fibration map in the generic case of Example 12. 2. 101 We 
will use the notation introduced in that example. The equations for any special case follow by specialization. 
Although the expressions involved become quite large, all computations in this section can still be checked 
by hand. We recommend, however, to check them with the MAGMA script provided [5T]. We will first give 
the elliptic fibration over over the field k g ([S]), over which the base curve can be taken to be the projective 
line. 

2.3.1 A fibration over the projective line 

After renumbering the elements of Q, we may assume that the 4-gons of iS are orbits under $0,^,,. After 
applying an automorphism that sends some of the to — tj (for notation, see Example 12.2. 10p . we may 
also assume that Lq is contained in one of the 4-gons of S. We renumber Si, . . . , S4 and S5, . . . , Ss, so that 
Si, . . . , 5*8 contain the lines L14, L24, L34, Lq, Li, L2, L3, and L4 respectively. In particular this means 

51 = {L14, L23, L145, L235}, S5 = {Li, L15, Li6, Lisq}, 

52 = {L13, L24, L135, £245}, Sq = {L2, L25, L26, ^256}- 

For notational convenience, we let N, cti and 0i be as in Lemma |2.2. 151 We also set 

7i=a 3 ~a2, &i = Ui<i<j<i(ui-ujj), 

72 = ai - a 3 , 

73 = a 2 -ai, K ] =H7< l <4( u} j - ^i)' l<i<4, 

v = Ei=i £ i. 

c r = elementary symmetric polynomial in the luj (1 < j < 4) of degree r. 
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Note that for 1 < j < 4 and ,/ C O we have <fj(£j) = ±£j, where the sign is negative if and only if we have 
j G J. For the evaluation of various linear forms at the intersection points of the lines in A, it will also be 
convenient to notice that we have 

4 r -C4 1 r = -1, 

^^kJ 1 = { r = 0,1,2, (2) 
3=1 { 1 r = 3. 

It will turn out that the elliptic fibration associated to S factors through the projection of W(A) to P 3 
by the coordinates ipi for 1 < i < 4, i.e., the projection away from the line given by ipi = for 1 < i < 4. 
The image of V under this projection is the nonsingular quadric of Remark 12.1.51 Note that V is 

contained in the inverse image of D W5WB under the indicated projection, which is the cone over the cone over 
D UBUg in P(A), given by Q = with 

4 

Q = u 5 u 6 Q - (u 5 + w 6 )Qi + Q2 = Y ^^^r ( 3 ) 

i=i 

as was pointed out in Remark 12. 1.51 Consider the linear forms 

h = Ej=i VjKj^m, m 2 = Ei=i( 2c 4^ 71 - C^Kj^tjipj. 

Lemma 2.3.1 On we have l\mi = liTfix. The map x : V — > P 1 £/iai sends x to [h(x) : mi(x)] = [^2(2) : 
7712(2:)] is an elliptic fibration, defined over k g ([S]). The A-gons Si, S2, S3, Si are fibers above [— 1 : cti], 
[— 1 : a-2\ : [—1 : as], and [0 : 1] respectively. 

Proof. From @ one easily works out that 77J1Z2 — Zi?7i2 = Q, so 011 V we find l\m2 = h^i- The four 
equations li = mi = l 2 = iri2 = are linearly independent, so the base locus of the map % is given by 
ifi = on V, for 1 < i < 4. Together with the equations Qo = Q\ = Q2 = (see Proposition 12.1.2]) , this 
implies that the base locus of x is empty. The fiber Fo of \ above [a : b] is the intersection of V with the 
three-space given by bli = ami for i = 1, 2. The quadric Q vanishes on this three-space, in which the fiber 
Fq is therefore given by Qo = Q\ = 0. Since every smooth intersection of two quadrics in P 3 is a curve of 
genus 1, wc deduce that x is an elliptic fibration, whose fibers all have degree 4. The intersection points of 
the lines in S4 are Pf )Wr with £ G {£ , £56}, and r € {5,6}. From (J5J) and the identity 

W (£j ^ - W r)) = ±(Uj - U r ), (4) 

where the sign is positive if and only if j /, we find that the /, vanish on these points, and thus on the lines 
in 54. This implies that S4 is contained in the fiber above [0:1]. Since all fibers have degree 4, the union of 
the lines in S4 is a whole fiber. The lines in Si U S2 U S3 do not intersect any line in Si, so they are fibral as 
well, which implies that all S € S are fibers of x- Their images are easily computed by evaluating the h/mi 
on the appropriate intersection points P^,u 5 of two lines in the 4-gons, using ([?]) and perhaps a computer 
algebra package to verify that for instance the ratio li(P$ 3 4,,u s ) ■ TO i (-^24,^5)1 which is the ratio between 

Ui — U5 Ll>2 ~ ^5 U3 — UI5 UJi — C1J5 

Kl K2 K3 

and 

ui(2ui - ci)(ui - u> 5 ) _ u 2 (2uj2 - ci)(u 2 - U5) . ^3(2^3 - ci)(u 3 - U5) _ u±(2u A - ci)(u 4 - u 5 ) 

Kl K2 H3 Hi 

does indeed equal — 1 : ot2 (see [21)V Since x IS a l so given by [rjli : rjmi], and the polynomials 77^ and rjmi 
are fixed by p~ 1 (G[s\), we find that x ' IS defined over k g ([S}). □ 
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Remark 2.3.2 The map x °f Lemma [2.3.11 is in fact defined over k g (Si). We found the linear forms U 
and mi as follows. Using simple linear algebra we found linear forms hi,h 2 ,h3, /14 vanishing on the lines in 
S4US5, S^USq, S3US5, and S3 U Sq respectively. The elliptic fibrations given by [hi : h 2 ) and [ft.3 : /14] both 
have the 4-gons in S' as fibers, so they differ by an automorphism of the base, which fixes the points [0 : 1] 
and [1 : 0] as both fibrations have the same fibers S5 and there. This implies that after the appropriate 
scaling of the hi we may assume h\h± = h 2 h3. The space of linear forms vanishing on S4 is spanned by hi 
and h 2 . We can pick a fc(S f 4)-basis l[ — ah± + bh 2 and l 2 = ch\ + dh 2 for some a, 0, c, d G m g . The fibers F\ 
and F 2 of the fibration [hi : h 2 ] = [/13 : /14] above the points [— b : a] and [— d : c] respectively are then defined 
over k(S4), as they are the complement of S4 inside the hyperplane section given by l[ and 1' 2 respectively. 
The space of linear forms vanishing on Fi is spanned by l[ and m" = a/13 + bh±. For some p, q, the form 
m'i = pl[ + qm'l = pl[ + aqhs + 60/14 is also defined over k(Si). Set m! 2 = pl 2 + cqh^ + dq/14. Then from 
h\hi = h 2 hz we also find l[m 2 = l' 2 m[ on V. For some choice of a,b,c,d,p,q, the given U and n%i satisfy 
l[ = rjli, and m! i = nun. 

2.3.2 The fibration over a conic 

Let r G Gal(m g /A: g ) denote the automorphism that fixes all the tUj and the tj for j > 3, and sends to — ti for 
i = 1,2. Then t induces the nontrivial automorphism of the quadratic extension fc s ( [<5>] )/n g (/?3 ) , generated 
by /?2- Since r permutes the 4-gons in 5, the elliptic fibration T \ differs from \ by some automorphism ip of 
the base curve P 1 by Proposition 12.1 .2"o1 i.e., we have T \ — ip X- This implies that the image of the map 
(\, T x)'- V P 1 x P 1 is contained in the graph of ip. Under the Segre embedding P 1 x P 1 — > P 3 this graph 
maps to a conic that we can embed in P 2 . We will now make this explicit. For i = 1, 2 we set 

Pi = 2(%)li, q, = ( T h) mi + ( T m,)I, + 2a 3 h T k, n = f3 2 \{ T mi )k - { T U) mi ). 

Let C\ C P 2 be the conic given by 7172P 2 + q 2 = (3 2 r 2 . 

Lemma 2.3.3 There is an elliptic fibration v\\ V — ► C\, defined over n g (f3z), given by x ^ [pi(x) : qi{x) : 
Tiix)] for i = 1,2, such that the 4-gons Si, S2, S3, S4 are fibers above [2 : 71 — 72 : — ^P^ 1 ], [2 : 71 — 72 : 
73/32 -1 ], [0 : 02 : 1], and [0 : f3 2 : —1] respectively. 

Proof. Note that the images of the Si under Xi given in Lemma 12.3.11 are r-invariant. This implies 
( T X)(Si) = T (x( r Si)) = x( T Si)- Note also that r acts on the Si as the permutation (Si S 2 )(S3 S4). By 
Proposition 12.1.261 the elliptic fibrations T x and x differ by an automorphism of P 1 . As an automorphism 
of P 1 is determined by its action on the x(<Si), this allows us to check that the automorphism ip: [s : t] i— > 
[— a 3 s — t : (a 2 + Jij2)s + a^t] of P 1 satisfies T x = tpX- By Lemma [2.3. H it suffices to check that ib switches 
the points [—1 : a{\ and [—1 : 012] and also the points [—1 : a.3] and [0 : 1] (see [21]). We conclude that 
(x, T x) : V — > P 1 x P 1 is an elliptic fibration over the graph of if>. 

Let h: P 1 x P 1 — > P 3 denote the modified Segre embedding that sends ([a : b], [c : d]) to [x : y : z : 
w] = [ac : ad + be : P 2 1 (ad — be) : bd]. Then the composition g = ho (x, X T ) : U — > P 3 is r-invariant, so it 
is defined over n g (/3 3 ). The image of the graph of ip under h is the conic given by y 2 — f3 2 z 2 = 4xw and 
(a 2 + 7172)2; + a 3 y + w = 0. The image of this conic under the projection tt: P 3 — > P 2 , [x, y, z, w] 1— » [2x : 
y + 2ct3X : z] is C\, so the composition v\ = 7r o 5 is an elliptic fibration of V over Ci. Since 7r and g are 
defined over n g (Ps), so is z^i. As x is given by [2j : m,], for i = 1,2, one checks easily that the fibration vi is 
given by [pi : % : r,]. The images of the fibers are easily computed using the images given in Lemma [2.3.11 
and the fact that we have ( T (li/mi))(Si) = (k/mi)( T Si) as noted above. □ 

We will construct an automorphism if> of P 2 such that ip o vi is an elliptic fibration from V to a conic 
C, such that both C and the fibration are defined over k g (S), the field of definition of the fibration. We 
know that there is an elliptic fibration over a conic defined over k g (S) whose fibers include the 4-gons of S. 
By Proposition 12.1. 2"6l it is unique up to an isomorphism of the conic, so we know such a ip exists. We will 
do this in two steps by first descending to n g and then to k g (S). Suppose at some step we have a fibration 

V — > Ci, with Ci a conic, defined over a field K t that is Galois over K i+i with Galois group G^. We are 
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looking for an automorphism tpi of P 2 such that Vi+i = tpi o z^: V — ► C,+i with C^+i = tpi (Ci) is defined over 
K i+1 . 

For all g G G; there is an isomorphism a(g): 9 Ci — > (7j such that = a(g) o Sj^. Since er(<?)*: PicC; — > 
Pic 9 Ci sends the canonical divisor of Ci to that of 9 Ci, the automorphism a(g) is induced by a unique 
automorphism of P 2 , which we will also denote by a(g). These automorphisms satisfy the cocycle condition 
cr(hg) = cr{h) o h a(g). The automorphism tpi that we seek satisfies tpi o a(g) = g tpi 1 so a is a coboundary with 
values in Aut P'L. . 



9 a 



v 























We can find tpi as follows. Consider the homomorphism GL 3 (Ai) — > AutP 2 ^. that maps a matrix M G 
GLs(Ki) to the automorphism that sends [x : y : z] to [x' : y' : z'\ with (x' y' z')* = M(xyz) t . Through this 
homomorphism we may identify AutP^-. with PGL 3 (Ai). 

Our first step will be to lift a to a cocycle for GL 3 (Aj). The map det: GL 3 (Aj) -> K*, M i-> det(M) 
induces a homomorphism PGL 3 (Ai) — ► K*/K* 3 . For any Gj-set M, let Z 1 (M) denote the corresponding 
set of 1-cocycles with coefficients in M. We obtain the following diagram. 



1 ^Z^n^Ki)) 



Y 

1 >Z\Kt) 

[3] 



1 



Z\Kf) 



■ Z 1 (SL 3 (K i )) - 

Y 

Z 1 (GL 3 (A' J )) 

dot 



^ 1 (PSL 3 (A 4 ))- 
Y 

Z 1 (PGL 3 (A i )) 

dot 

T 

~Z\K*/Kf)- 



-> H 2 (K*) 
>H 2 (Kf) 



Since er G Z 1 (PGL 3 (Ai)) is in fact a coboundary it maps to zero in iJ 1 (PGL 3 (Aj)), so it also maps to zero 
in H 2 (K*). Therefore we can lift er to an element er' G Z 1 (GL 3 (Ai)). To do this in practice we note that we 
are working over a generic field, so we may assume Ki has no cube roots of unity. This implies that SL 3 (Ai) 
is isomorphic to the subgroup PSL 3 (Ai) of PGL 3 (Ai), so an element M G GL 3 (Aj) is uniquely determined 
by its determinant and its image in PGL 3 (A;). Thus a' G Z 1 (GL 3 (A'i)) is uniquely determined by its image 
a and deter' G Z l {K%), which is a lift of deter G Z 1 (K*/K* 3 ). To find a' it therefore suffices to find a lift 
of deter G Z X (K* /K* 3 ) to Z X (K*). In our case deter will always be trivial, so this step is easy. 

The second step is to write er' = Z 1 (GL 3 (K i )) as a coboundary, which is possible as we have i/ 1 (GL 3 (A i )) = 
1 by a generalization of Hilbert 90. For this we use a standard trick, discussed in [IB], Proposition X.3. For 
any matrix M we set 

g£G 

One checks that we have a'(h) ■ h bM = Choosing M carefully so that 6m is invertible, we may take tpi 
to be the automorphism associated to the matrix . After some simplifications of these automorphisms 
we get the following lemma, which can in fact be checked without knowing how we obtained the equations. 
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Let C 2 C F 2 (u, v, w) be the conic given by / fif3 2 u 2 + j 2 [3 2 v 2 + I3P3W 2 an d set 

Ui = Pi 1 {qi + l2Pi) = Pi 1 ( T km i + T mik + 2oL\li T li), 
v i = K 1 fe - IlPi) = P^^imi + r m i l l + 2a 2 k T k), 
w l = -f3 2 Pz 1 r i = ^'(7.™. - T mik). 

Lemma 2.3.4 There is an elliptic fibration v 2 : V — > C 2 , defined over n g , given by x 1— > [ui(x) : Vi(x) : Wi(x)] 
for i = 1,2, such that the 4-gons S±, S 2 , S3, S4 are fibers above [— : (S^ 1 : 0$ ], [P^ 1 '■ —0 2 X '■ fi^ 1 }, 
[Pi 1 '■ 2 : — 03 ], and [0^ : 0^ : P^ 1 ] respectively. 

Proof. The nontrivial automorphism tt of the extension n g (03)/n g is induced by the automorphism that 
fixes all ujj and all ej, except for e\ and £3, which are sent to their negatives. It acts on the Si as the 
permutation (Si S3) (52 S4). The composition v 2 : V — > P 2 of v\ and 

%l>: P 2 -> P 2 , [p = 9 : r] ^ + l 2 p) : fl^fa - 71P) : -ft^r] 

is given by x 1— ► [ui(x) : Vi(x) : w;(x)]. The inverse of ip is given by 

[u : v : w] h-> [/3]U - /3 2 t> : 7iA u + 72/^ : 7 3 /3 2 ~ 1 /33w]. 

Substituting this into the equation for Ci, we find that the conic ip(Ci) is equal to C 2 . Alternatively, one 
checks that we have 

7 i/3 2 m 2 + l2 2 2 v 2 + 73/?3^ 2 = ±ysbi%kQ, 

with 61 = u>i + W2 — W3 — W4 and 62 = — 04(0;^ 1 + cj^ 1 — w^ 1 — lu^ 1 ) (see |21j). Since Q vanishes on V, 
this also shows that v 2 maps V to C 2 . As n permutes £, the 4-gons in S are also fibers of V2, so v 2 and 
V2 differ by an isomorphism on the base by Proposition 12.1.261 Therefore, there is a unique isomorphism 
h: C 2 — > ^6*2 = C2 such that = h o i> 2 . Since /i fixes the anticanonical divisor on C 2 , which determines 
the embedding of C 2 in P 2 , the isomorphism h comes from a unique automorphism of P 2 , which we will also 
denote by h. With the points vi(Si) given in Lcmma l2.3.3l one easily computes u 2 [Si) — ip(vi(Si)) to be as 
claimed. With the identity (V 2 )(Si) = ^{v^ 1 S t )) we check that we have (V 2 )(Si) = v 2 {Si) for 1 < i < 4, 
so h fixes the four points v 2 (Si). As these points all lie on C 2 , no three of them are collinear. This implies 
that the action of h on the four points determines h uniquely, which means that h is the identity, so v v 2 = v 2 . 
We conclude that v 2 is defined over the fixed field n g of ir. □ 

Finally, we let C3 C P 2 (x, y, z) be the conic given by 
7i/3 2 (x + 71A4?/ + (a 2 + a 3 )z) 2 + 72/?! (x + 72A4Z/ + (ai + a 3 )z) 2 + 7 3 /3 2 (x + 73A4J/ + (cti + a 2 )z) 2 = 0, 
and we set 

x l = 2A4((a 2 a3 - a\)ui + (aia 3 - c? 2 )v l + (aia 2 - a 2 )wi), 
Vi = -7i«i - l2Vi - 73 Wi, 

zi = A 4 ((7 2 - j 3 )ui + (73 - 7i)i>j + (71 - j 2 )wi). 

Lemma 2.3.5 There is an elliptic fibration V3: V — > C3, defined over k g (S), given by x <—> [x^(x) : yi(x) : 
Zi{x)\ for i = 1, 2, such that the A-gons of S are fibers of V3. 

Proof. Let 7Ti,7T2 G Gal(n g /k g (S)) denote the automorphisms induced by the permutations (u)\ lo 2 U3) 
and (lji lo 2 ) on the luj respectively and the corresponding permutation on the ej. Then 7Ti and tt 2 induce 
generators of G&\(n g /k g (S)). They act on S, the ctj,j3j,^ij, and the 4>j as the permutations (1 2 3) and (1 2) 
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on the indices, except that 7T2 also negates the 7,-. Note also that we have 7ri(A4) = A4 and 7T2(A4) = — A4. 
The composition 1/3: V — » P 2 of v 2 and ip: P 2 — > P 2 , [it : w : w] >—>■ [x : y : z] with 

x = 2A4((a2Q!3 — a\)u + (ax (23 — a 2 )v + (ax«2 — a\)w) , 
y = -71 it - 72V - 73W, 

z = A 4 ((72 - 7 3 )m + (73 - Ji)v + (71 - 72 V). 

is given by P t— ► [jCi(P) : Vi{P) ■ Zi(P)]. The inverse of "0 is given by 

[a; : y : 2] 1-* [x + jiA 4 y + (02 + a 3 )z : x + 72A4?/ + (ax + 0:3)2: : x + 73A4?/ + (ax + a2)z]. 

Substituting this in the equation for C 2 , we find that the conic ip(C 2 ) is equal to C3, so ^3 maps V" to C3. Note 
that for all </ G Gal(n ff /fc ff (5)) we have 9 C 3 = C3. As in the proof of Lemma T2.3.4( for all g £ Gal(n g /k g (S)) 
there is an automorphism h g of P 2 such that we have g v<& = h g oi/ 3 . Evaluating ip at the points ^2 (Si) given in 
Lemma T2.3. 41 and using the identity (%/3)(Si) = 9 {ip{v2{ 9 1 Si))), we check that for all g £ Gal(n g /k g (S)) we 
have (% 3 )(Si) = 1^3 (5^ ) for 1 < i < 4. It suffices to check this for g = 7rx,7r 2 . As in the proof of Lemma [2. 3. 41 
this implies that for all g £ G&\(n g /k g (S)) the automorphism h g is the identity, so g v§ — 1/3. We conclude 
that V3 is defined over k g (S). □ 



Remark 2.3.6 Even though the fibration 1/3 is defined over k g (S), the polynomials Xi, yi, z% that describe U3 
are not, and neither is the defining equation of C3. The latter issue is easily resolved by multiplying the given 
equation for C3 by A4 to obtain an equation defined over k(S). To settle the former, we can replace Xi, yi, Zi 
with Galois-invariant polynomials as follows. Again we descend from the field k g ([S]) to k g (S) in steps. The 
polynomials ij and m, are not defined over k g ([S]), but rjli and rjrrii are, as they are fixed by the elements 
of G[s], see Lemma [2. 2. 141 Scaling by ^VVi we nn d that the polynomials it- = f3 2 T iT r l u i: v 'i = fa^VWi, and 
w[ = ^rjriWi are also defined over n g (f3 3 ) and define u 2 as well. Since v 2 is defined over n g , the polynomials 
^u'^^v'i, and "wj, define v 2 as well, where 7r is the nontrivial automorphism of n g {(5 3 )/n g as in the proof of 
Lemma [2. 3. 41 This implies that v 2 can also be defined by [u" : v" : w"] with u'( = u^ + ^u^, v" = v[ + and 
w'l = w' t + 7C v/ i unless these polynomials vanish on V, which they turn out not to. One checks for instance 
that we have 

frit" f K^Slipj + K4 1 S i lfl , Kj 1 ^^! + K3 

" (,ei£2 — £3£4j 



+ 4(5i + <5 2 - <5 3 - &l)(Wx - UJ-2 - ^3 + W4) ((u>x - C^)*^ 1 /^ le l e 2¥>l¥>2 + (Ci>3 - W4)k 3 " 1 K4 1 £364^3^4) 

(see IH]). With the same trick we descend to k g (S). The polynomials 

x\ = 2A 4 ((a 2 a 3 - a?) u " + (axa 3 - a|)v" + (aia 2 - a^u;-'), 
^ = -7i«< - 72< ~ 73 w", 

^ = A 4 ((72 - 73K' + (73 - 7iX + (7i - IzWi)- 

are defined over n g and f 3 is defined by [x[ : y[ : Since 1/3 is defined over k g {S), it is also defined by 
: % : g z[\ for any g £ Gai(n g /k g (S)) and therefore by [x'[ : y'f : z'{\ with x'( = E ge Gal(n 3 /fc 9 (S)) 
= E 9eG al(n 3 /fc 3 (S)) % and z f = E 3eG ai(n 3 /fe g (5)) % unlcss thcsc polynomials, defined over k(S), vanish 
on V. An explicit computation shows that they do not. Over k g (S) we can write / = / 2 /4 with fa = 
X A — c\X 3 + c 2 X 2 — C3A + C4, where the c r are the symmetric polynomials in the u>j (1 < j < 4) of 
degree r. The image in A4 = k g [X]/fa of 5 £ A can be written as S' = d^X 3 + d 2 X 2 + d\X + c?o with 
di £ k g (ci, 02, C3, C4). We may also consider the di to be independent transccndentals contained in k g (here 
the di are not the same as in Example l2.2.10p . Let N denote a square root of the norm N^/j. (6') of 8'. Note 
that as always we have ipj = Ei=o w j ai ' w here the are the original coordinates of ¥(A). The polynomials 
x'l , y'l , and z'/ are quadratic in the with coefficients in the field Q(ci, C2, C3, C4, do, d\, da, <i 3 , N). Expressing 



21 



them as such takes a file that has size about one megabyte [H] . Note also that the equations for the fibration 
do not depend on and loq. This shows that the fibration does indeed factor through the quadric -D W5W6 
in P 3 of Remark 12.1.51 because that is the image of V under the projection from F(A) to P 3 using only the 
coordinates ipi, . . . , tp^. 

Remark 2.3.7 In any specific example, wc can consider the specialization of the equations for C3 and 
the fibration v% in Lemma 12.3.51 or better, Remark 12.3.61 For a proper closed subset in the family of all 
curves of genus 2 and choices of S these equations may vanish. Outside this subset, this specialization gives 
us an elliptic fibration v of a surface V over a conic C . If V is everywhere locally solvable, then so is 
C. Since C satisfies the Hasse principle, this implies that C has a rational point, which can be found by 
standard algorithms. This gives us a rational fiber Fq on V. The linear system of hyperplanes through 
Fq is 2-dimensional and determines an elliptic fibration 1/ of V over P 1 , given by linear polynomials. The 
4-gons that are fibers of v 1 belong to the complementary exhibit of the exhibit whose 4-gons are fibers of v. 
Applying the same trick again, we also obtain an elliptic fibration over P 1 that is equivalent to v. On the 
other hand, even if C is everywhere locally solvable, V may not be. 
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3 Arithmetical applications 



In this section we apply the theory of the previous sections, combined with the idea of the Brauer-Manin 
obstruction, to give an example of a K3 surface arising from 2-descent on a family of curves of genus 2 that 
has rational points everywhere locally but not globally, and hence a family of curves of genus 2 all having 
nontrivial Tate-Shafarevich group. 

3.1 The Brauer group and the Brauer-Manin obstruction 

To explain the Brauer-Manin obstruction, let V be a variety over a number field K. If there is a place p of 
K at which V has no points, then of course V has no if -rational points. But if V has points everywhere 
locally, we can sometimes use the Brauer group to prove that it does not have any points defined over K. We 
begin by defining the Brauer group of a scheme; this material is taken from the beginning of [12] , chapter 4. 

Definition 3.1.1 Let R be a ring. Then an Azumaya algebra A over R is a free R-algebra of finite rank as 
an R-module such that A ®r A op is isomorphic to End(A) by the map taking a® a' to the endomorphism 
x — ► axa' . 

Definition 3.1.2 Let V be a scheme. An Azumaya algebra A on V is a coherent sheaf of R- algebras whose 
stalk at every point x of V is an Azumaya algebra over the local ring ofV at x. The Brauer group of V is 
the semigroup of Azumaya algebras on V under tensor product modulo the subsemigroup of endomorphism 
algebras of locally free sheaves. 

The Brauer group of a field K is often defined as the semigroup of finite-dimensional central simple 
algebras over K under the operation of tensor product modulo the subsemigroup {M n (K) : n G N}. This 
is a special case of the definition above. Alternatively, Br K can be thought of as H 2 (K, K scp *), which 
can be rewritten as i?J+(Spec K, K scp *) using the standard equivalence ([32], Example III. 1.7) between etale 
cohomology of Spec K and Galois cohomology of Gal(X sep /.K')-modules. We extend this definition to general 
schemes as follows. 

Definition 3.1.3 For a variety V over a field K , we use V to denote V ®k K. 

Definition 3.1.4 The cohomological Brauer group Br V of a scheme V is H?,(V, <G TO ). LfV is defined over 
a field K, then the algebraic part of the Brauer group Bri V is the kernel of the natural map Br V — > Bry. 

We can use the Brauer group to find obstructions to the existence of points, but it is difficult to compute. 
However, we can compute the algebraic part of the Brauer group. By [TJ], Prop. IV. 2. 15, the Brauer group 
and the cohomological Brauer group are isomorphic when V is a smooth variety over a field. For V defined 
over a number field, the algebraic part of the Brauer group can be computed as if 1 (if, Pic y), as shown in 
[3], sect. 4.1. As stated in Corollary 12. 1.41 we have Pict^ = NS V", a finitely generated free abelian group. 

In this paper, we will only consider the algebraic part of the Brauer group. Now we explain how to use 
the Brauer group to show that V has no if -rational points. 

Definition 3.1.5 Let K be a number field and p a place of K . The local invariant inv p (s) of an element s 
of the Brauer group of the local field K v is its image under the natural homomorphism BrX p — > Q/Z f\l 61/ . 
Proposition XII. 6). 

Recall that this homomorphism is always injective, and that it is surjective if p is non-archimedcan, while 
its image is generated by 1/2 if p is real and is trivial if p is complex. 
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Definition 3.1.6 For s E ByV, p a place of K, and P £ V(K p ), the local invariant of s at P is the 
local invariant inv p (sp) of the element sp G Br K p obtained by pulling back the cohomology class s by the 
map Spec A p — + V whose image is the point P. More concretely, it is the local invariant of the Azumaya 
algebra over K p whose multiplication table is given by evaluating the elements of the multiplication table of 
an Azumaya algebra representing s at the coordinates of P. 

Every A'-point P of V corresponds to a morphism Spec K — ► V that induces a map ~QyV — ► Br K by 
pulling back cohomology. We denote the image of an element s £ BrV under this map by s(P), yielding a 
map V(K) — > Br K that is also denoted by s. Similarly for every place p (archimedean or non-archimedean) 
of K we get a map s p :V(K p ) — > BrA' p . We obtain the following commutative diagram, where the top 
horizontal map is the diagonal embedding and A s is defined to be the composition shown. 



V(K) >T1 P V(K P ) 




The bottom row is exact by class field theory, so the image of the top horizontal map is contained in Aj 1 (0). 
If we show that n s gBr kAJ (0) = 0, then we may conclude that there is no AVrational point on V, and we 
say that the Brauer-Manin obstruction blocks the existence of rational points on V. It suffices to let s run 
over a set of generators of Br V/ Br K . Often it is more convenient to consider only elements of Br V j Br K 
belonging to a subset B, and then we speak of the Brauer-Manin obstruction on B blocking the existence of 
rational points. 

Proposition 3.1.7 Let B be a subgroup ofHrV/BrK of order 2 generated by the element s. Then the 
Brauer-Manin obstruction on B blocks the existence of rational points on V if and only if for all p, the local 
invariant of s is constant on K p -points of V and the constants do not add to 0. 

Proof. The sufficiency of this condition is clear. For the necessity, note that, if the local invariant is not 
constant on A p -points for some p, we may choose an arbitrary collection of local points at other places with 
invariants adding to a £ {0, 1/2} and then choose a A p -point whose invariant is equal to a, thus obtaining 
a system of points with local invariants adding to 0. In the case where the local invariant is constant on 
Ap-points for all p, the necessity of the condition that the constants not add to is obvious. □ 

Now let us explain how to construct K3 surfaces with elements of the Braucr group that arc likely to give 
nontrivial obstructions. Although it is usually easy to calculate H 1 (A, Pic V"), at least when H 1 (V,Ov) = 
and so Pic V is finitely generated, it is difficult to find Azumaya algebras corresponding to nontrivial 
cohomology classes. Doing so requires finding rational divisors in rational divisor classes. Such divisors always 
exist if V has points everywhere locally, but in practice it is not easy to find them. Over an algebraically 
closed field the effective divisors in a linear equivalence class constitute a P", so the problem reduces to 
finding a rational point on a locally solvable Brauer-Severi variety. This can be reduced to solving a norm 
equation from a field over which all elements of Pic V are defined, but even when the splitting field of / is 
fairly small this is likely to be impractical. 

We will follow U, section 4.4, in using elliptic fibrations on varieties to construct nontrivial elements of 
the Brauer group. For a variety with a fibration 0, we define the vertical Picard group Pic^ V to be the 
subgroup of Pic V spanned by the classes of components of fibers. The vertical Brauer group Br^ V can then 
be defined as PT 1 (A, Pic^ V"). (We deviate from the standard notations Pic vert and Br vert used in [5] because it 
is necessary for us to distinguish between vertical Picard and Brauer groups coming from different fibrations 
on the same variety.) The inclusion of Pic^ V into Pic V gives a natural map Br^ V — > P^ 1 (A, Pic V), which 
need not be either injective nor surjective. 



24 



It is shown in [3], Prop. 4.21, that elements of Br^ V are represented by Azumaya algebras that are pulled 
back from central simple algebras on the function field of the target of 4>. The stalk of such an Azumaya 
algebra is constant on all fibers of <j>, so the local invariants of such algebras are too. 

Definition 3.1.8 Let F be any field, and a and b nonzero elements of F. The symbol (a, b) denotes the 
central simple F -algebra of rank 4 with basis 1, k and multiplication given by i 2 = a,j = b, ij = k,ji = 
-k. 

Proposition 3.1.9 // F is a local field, the local invariant of (a, b) is if and only if the quadratic form 
x 2 — ay 2 — bz 2 represents nontrivially in F; otherwise it is 1/2. In particular, if the residue characteristic 
of F is odd, then the invariant is if and only if at least one of the following conditions holds: a and b both 
have even valuation; one of a and b is a square; or ab is a square. 

Proof. The first statement is well-known (note in particular that if a or 6 is a square then the local invariant 
is 0). The second follows from the discussion at the beginning of [H], section XIV. 4, which applies just as 
well to any finite extension of Q p as to Q p itself. □ 

Proposition 3.1.10 Let : V — > P 1 be an elliptic fibration, and suppose that V has bad fibers of type I4 
over (a : 1), where [Q(a) : Q] = 4. Suppose further that the field of definition of the components of the fiber 
at (a : 1) is Q(a, \f£), where c € Q(a) is of square norm, and that the Q(a)- components of this fiber consist 
of two disjoint lines. Then the pullback of the algebra coresQ( a )/Q(c, t — a) G BrQ(f) to V, where t is the 
coordinate on the standard affine patch 0/P 1 , is an element o/Br^y. 

Proof. This follows immediately from [3], Proposition 4.28. □ 

Remark 3.1.11 Note that the hypotheses entail that the fiber consists of two pairs of disjoint lines L\, Mi 
and L2,M2, where all the Li and M, are defined and conjugate over one and the same quadratic extension 
Q(a,^/c) ofQ(a). 

For this to be useful to us, we need to know how to compute the local invariants of the algebra 
coresQ( Q )/Q(c, t — a) e BrQ. The following proposition addresses this question. 

Proposition 3.1.12 (Joy, Lemma 5 (i)) The local invariant of coresQ( Q )/Q(c, t — a) at p is the sum of those 
of (c, t — a) at places of Q(a) lying above p. 

Now we are ready to show how wc chose / and i5 so that there would be a nontrivial clement of the 
Brauer group arising from an elliptic fibration. 

Definition 3.1.13 From now on, f will always denote a polynomial which is the product of three irre- 
ducible quadratic polynomials fi, f2, fa and S will be an element of (Q[X]/ (f))* . For given f and 6, let 
l be an isomorphism from Q[X]/(f) to ffif =1 Q[A"]/(/i) (which exists by the Chinese Remainder Theorem), 
fix isomorphisms Ki from Q[X]/(fi) to Q © Q (again by the Chinese Remainder Theorem), let Vi be the 
component of in Q[X]/(fi), and let Vik be the kth component of Ki(vi). For convenience define 5j so 
that <$2(j-i)-|-fc = Vik (this notation coincides with the Sj of Examvle \2.2.~lfy) . Also let Oi be the nontrivial 
automorphism of Q[X and let ri be a fixed root of fi in Q. 

Theorem 3.1.14 With f and 5 as above, let V be the K3 surface constructed from /, 5. Suppose further that 
the splitting field of f is of degree 8; that the norm of V\ is a square; that the norms of V2 and v% multiplied 
by the discriminant of f\ are squares; and that the Vi are otherwise generic. Then the field of definition of 
the lines ofV has degree 32, both elliptic fibrations associated to the factorization f = (/i)(/2/3) in Remark 
\2.2.6\ satisfy the conditions f Provosition [3.1.KA and the elements of the respective vertical Brauer groups 
constructed in that proposition map to the same element of H (Q, Pic V) and hence to the same element of 
Br V/ Br K. 
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Proof. The condition on 8 shows that the norm of the projection of 8 to Q[A]/(/2/3) is a square, so the 
elliptic fibrations are defined over Q by Remark l2.2.61 As we did in the discussion just after Lemma [2. 2. 21 fix 
a square root yj~8j of 8j for j 6 {1, . . . , 6} (corresponding to ej in Examplc l2.2.10p . Let us now determine the 
action of the absolute Galois group of Q on the lines. By Lemma [2. 2. 81 it factors through the extension m 
of the splitting field I = Q(ri, r%, r^) of / obtained by adjoining all elements of the form \f8l^j8~j. Note that 
8182 = V11V12 — N(n[x]/ f^/qiv 1) is a square by hypothesis. Similarly, letting Ai denotes the discriminant of 
fi, we find that A1S3S4 and Ai^sJg are squares, and thus that 8384 and 8§8§ are squares in Q(v / A~i") = Q(?"i). 
It follows that up to square factors in Q(ri) every element of the form \f8~iyj~8~j is equivalent to 8183, 8185, 
or 8385. We conclude that m = 1(^/81^/83, VSiVS^)- As the V{ are otherwise generic, we find that the field 
m of definition of the lines has degree 4 over I and therefore degree 32 over Q. 

We now describe the Galois group of m over Q in terms of the s,t described in the discussion following 
Proposition 12.2. Ill The Vi are generic aside from their given properties, so the field m! = l(\/~8~i, . . . , \/8q) = 
m(V8~i) nas degree 2 over m (cf. discussion following Lemma [2.2.21 and Example I2.2.10[) . Recall that for 
a permutation p£ Sj, the automorphism t p of m is induced from m' by sending 8j and ^J~8~j to <5 p (j) and 
■>J8p(j) respectively For a subset I C {1, 2, . . . , 6}, the automorphism sj of m is induced from m! by fixing 
all 8j and sending to where the sign is negative if and only if j £ /. We will also refer to the 32 

lines on V using the notation Lj introduced before Lemma r2.2.31 

The automorphism o\ lifts to an automorphism of m' that fixes r-i and ra, and therefore all Sj for 
3 < j < 6. Because o\ sends v^T to — -y/Ai, and 8384 and 8585 are squares up to a factor Ai, this lift 
changes the signs of the square roots of one of ($3 and 84 and of one of 85 and . The induced automorphism 
of m is then t^2)Sij for some i £ {3,4} and j € {5,6}. The automorphisms 02 and 03 lift to £(34) and t(56) 
respectively. Together with S{i,2} and S{3,4} these elements generate a subgroup of Gal(m/Q) of order 32, 
so they generate the full Galois group. The orbits of this group on the lines are of order 8 and each orbit 
contains two nonintersecting lines from each of the four fibers of one fibration. In particular, all the four I4 
fibers are conjugate, so they are indeed defined over a field of degree 4. 

By Remark |2 . 2 . 61 the fibers of the elliptic fibrations are orbits of A under the group generated by si and S2 
in Aut A (only their product S1S2 is in the subgroup of Aut A induced by Galois). Consider first the fibration 
associated to the exhibit S that contains a 4-gon S containing Lq. Then that 4-gon is S = {Lq, L\, L2, L12}. 
One easily checks that the subgroup Gal(m/fc(5)) is generated by £(34), i(56), and S{i.2}- This group fixes 
Q(r-i), so we have Q(ri) C k(S), and in fact the group Gal(m/Q(ri)) is generated by Gal(m/fc(S')) and 
s {3,4}- Under Gal(m/fc(5')) the 4-gon S breaks up into the orbits {L ,L 12 } and {Li,L 2 }, each consisting of 
two disjoint lines. 

Let L be any line in S. The subgroup Gal(m/k(L)) is generated by £(34) and £(56), which is normal in 
Gal(m/Q(r!)). Therefore, k(L) is Galois over Q(r!) and the corresponding Galois group is (Z/2Z) 2 . Since 
k(S) is one of the quadratic subfields, it follows from elementary Galois theory that k(L) can be obtained 
from k(S) by adjoining the square root of an element c € Q(ri). As k(S) has degree 4 over Q and Q(ri) is 
a quadratic subextension, the norm of c from k(S) to Q is indeed a square. The arguments for the opposite 
fibration are completely similar. 

The final statement of the proposition, that the elements of the vertical Brauer group obtained in this way 
give the same element of H 1 (Q, PicV), is proved by a calculation using MAGMA. The point is to verify that 
the images of the nontrivial elements of i? 1 (Q, Pic,/, V) and -ff 1 (Q, Pic0< V) constructed in Proposition 13.1.101 
in H 1 (Q, Pic V) are equal, where <f> and <f>' are the two fibrations associated to the factorization / = (/i)(/2/3) 
as in Remark 12.2.61 See [21] for details. □ 

Remark 3.1.15 In special cases it is possible for the Picard group of V to have higher rank than in the 
generic case (in fact this happens in the example that we present immediately below). Thus we may have 
constructed elements, not of -ff 1 (Q, PicV), but only of i? 1 (Q, P), where P, the subgroup of Picy generated 
by the classes of the lines, is a proper subgroup of Pic V. The inclusion P — > Pic V gives a map from 
H 1 (Q, P) to -ff 1 (Q, PicV), which allows us to consider the elements we have constructed as elements of the 
Brauer group. It is possible that our elements could be in the kernel of this map in some situations. However, 
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they are well-defined Brauer classes, and so they may be used to attempt to prove that V has no rational 
points. If their local invariants do not add to 0, it indicates that they are not in the kernel. 

Remark 3.1.16 It is not essential for the method that the element of i? 1 (Q,Pict^) be obtainable from 
two different fibrations. However, as was first pointed out by Swinnerton-Dyer, this means that the local 
invariants are constant on the fibers of two different fibrations and is therefore much more likely to be 
constant than would otherwise be the case. This greatly facilitated finding the example below. 

3.2 An explicit example 

Now let us present our example, which was found by searching over various choices of /i, /2, fs with small 
splitting fields Q(i), Q(v2), Q(v / 5) such that the discriminant of /1/2/3 is small and 5 such that the field of 
definition of the lines would not introduce new bad primes. For the rest of this paper, let / = (x 2 + l)(x 2 — 
2x -l){x 2 +x-l) = fi(x)f 2 (x)f 3 (x), let Af = Q[X ]/f(X), let E be the algebra Q(i) Q(V5) ® Q(VE), 
fix an isomorphism l : Af — ► E as in Definition 13 . 1 . 151 and let 

5= (-2X 5 + 3X 4 + 5X 3 -8X 2 + 7X + 7)/6 (5) 

be the element of Af, so that l(5) = (3, —(1 + \/2), (1 + \fB)/2). Then /, 5 satisfy the conditions of Theorem 
13.1.141 For nonzero rational t let C* be the curve y 2 = tf(x). Let V be the K3 surface Vf.s- Our goal is to 
prove the main theorem, Theorem 1 1.0. II restated and slightly reworded here for case of reading: 

Theorem 3.2.1 Let S be the union o/{5} with the set of primes that split completely in the field of definition 
of the lines of V , which is 

F = Q y/2, V5, ^-3(1 + V2), ^6(1 + ^5)^ . 

Then for all n which are products of elements of S, the 2-part of the Tate-Shafarevich group of the Jacobian 
of the curve C_g„ is nontrivial. 

To do so, we will follow the strategy outlined in the introduction: first we will show that S gives an element 
of the fake Selmer group of the curve in question by showing that the corresponding principal homogeneous 
space of the Jacobian of C_g„ has points everywhere locally. Then we will use the element of the Brauer 
group described above to prove that Vfj has no rational points and conclude that the principal homogeneous 
space has no rational points either. We begin by summarizing some results from |18j on the fake Selmer 
group of a hyperelliptic curve of genus 2. 

Definition 3.2.2 Let g be a squarefree polynomial of degree 6 over Q and C the curve y 2 = g(x). For any 
field K of characteristic 0, let H K = kcr(7V : (A g ®K)*/(A g ® K)* 2 K* -> K* / K* 2 ) with A g = Q[X]/g(X). 
(Note that the norm is well-defined, because degg is even and so N(K*) C K* .) Write H instead of H Q . 
As in U8f , Prop. 5.5, let the fake Selmer group Sclf a jJ. c (Q, Jac C) of C be the subgroup of H consisting of 
elements that are everywhere locally in the image of the 2-descent map on the Jacobian of C Define A^, the 
descent map over K , to be the function from the set of K -rational points of C which are neither Weierstrass 
points nor points at infinity to Hk such that Ak (xq, yo) = 1 <S> %o ~ X ®1. 

Proposition 3.2.3 The function Aj< may be extended multiplicatively to a function from J(K) to H^. 

Proof. This is essentially [T5], Lemma 2.1, as modified by the discussion in section 2.5; see also |T5] , sect. 
6 for explicit formulas for Weierstrass points. □ 

Proposition 3.2.4 Let S be the set of primes introduced in Theorem \3.2.1\ Then for all n that are products 
of elements of S , the fake Selmer group of the Jacobian of C_6n contains S. Equivalently, the principal 
homogeneous space of Jac(C_6n) corresponding to S is everywhere locally solvable. 
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Proof. We need only show that 5 is in the image of the local Selmer maps for primes of bad reduction 
and co. The primes of bad reduction are 2, 3, 5, and primes dividing n. At a prime p dividing n, we have 
that 8 corresponds under l to an element of the form (3, 3a 2 , 3b 2 ) in E £g> Q p . Therefore, 8 is contained in 
(Af ® Q p )* 2 Qp, so it is the identity clement in Hq p and is in the image of every homomorphism. Thus 6 is in 
the image of the local 2-descent map. Note also that every product of elements of S is positive, is equivalent 
to 1 or 5 in Q*/Q* 2 for p = 2,5, and is a unit locally at 3. It follows that we need only check the assertion for 
ri = 1, p = 2, 3, 5, co, and n = 5, p = 2, 3, 5. This can be done by using magma's TwoSelmerGroup command 
to compute the fake Selmer groups of C_6 and C_6-5 and verifying that 8 is an element of both. The last 
statement follows by applying the fact that the principal homogeneous space over a field K corresponding 
to 8 has points if and only if 8 is in the image of A^- to all completions of Q. □ 

Proposition 3.2.5 Assume Stoll's condition (f) (this is automatic for curves of even genus). If the image of 
Jac(C{)/2 Jac(Ct) under the 2-descent map Aq is properly contained in the fake Selmer group, then Jac(Ct) 
has nontrivial Tate-Shafarevich group. 

Proof. Let c = dimScl^ 2 -' Jac(C t ) — dim Scl^ e Jac(Ct) and let d be the dimension of the "Cassels kernel" 
of Jac(Ct), namely, the kernel of the descent map modulo 2 Jac(Cf). Since we are assuming condition (f), 
we have c = if and only if condition (|), and condition (J) implies that d — 0. Both c and d are at most 1, 
so c > d. Under the assumptions of the proposition, it follows that 

dimScl (2) Jac(C t ) = dimScl[^ c Jac(C t ) + c 

> dimim Jac(Ct) +c 

> dimim Jac(Ct) + d 

= dim Jac(C t )/2 Jac(C t ), 

from which the conclusion is immediate. □ 
Now we indicate the relation between the descent map and the K3 surface Vf t $ that we have defined. 

Proposition 3.2.6 With f and 8 as above, let V be the K3 surface constructed from /, 8. Suppose that 
V has no rational points. Then 8 is not in the image of the 2-descent map for the Jacobian of the curve 

y 2 = f(x). 

Proof. Suppose, to the contrary, that 8 were in the image; that is, that Aq(D) = 8 for some divisor D of 
degree 0. By Riemann-Roch, this divisor may be taken to be of the form (x%, yi)-\-(x2, yi) — H, where H is the 
hyperelliptic divisor. Since Aq(H) = 1, this means that Aq(Z?) = Aq((xi, yi) + (x2, 2/2)) = {x\ — X)(x 2 — X) 
in Af j (A*j:) 2 Q* , where we have identified Af <g>Q Q with Af. In other words, for some rgQ and q £ Af we 
have 8q 2 = rx\Xi — r{x\ + x-i)X + rX 2 . In particular, the point of P 5 whose coordinates are the coefficients 
of q lies on V. □ 

Remark 3.2.7 Propositions 13. 2. 51 and [3~2~6l together imply that if 8 is an element of the fake Selmer group 
Selj a ^. o ((Q, JacCj) and the corresponding Vf t s has no rational points, then Jac(Cj) has nontrivial Tate- 
Shafarcvich group. This also follows from the fact that Vfj = Vtf,& is a quotient of the homogeneous 
space of Jac Ct corresponding to 8. Indeed, this implies that if Vf y s has no rational points, then neither does 
the homogeneous space, which implies its image in the Tate-Shafarevich group is nontrivial. 

It is also worth mentioning that the existence of the nontrivial clement of III that wc will exhibit is not 
a consequence of the results of [14] on odd curves, which we now describe briefly 

Definition 3.2.8 ( \14V Let C be a curve over Q of genus g. We say that C is deficient at p, where p is a 
prime or 00, if C has no rational divisor of degree g — 1 over Q p . We say that C is even or odd depending 
on the parity of the number of places at which C is deficient. 
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Denote the 2-primary part of HI(Jac(C)) by in(Jac(C*))[2 00 ]. Then, if III(Jac(C))[2 00 ] is finite, its order 
is a square if and only if C is even ([14j. Theorem 11). It follows that if C is odd that in(Jac(C))[2°°] is 
nontrivial. The following proposition proves that the elements of III that we find are not merely artifacts of 
the oddness of our curves. 

Proposition 3.2.9 If n is a product of primes in S, then C_g„ is even. 

Proof. A curve is never deficient at a prime p of good reduction, for there are always points over all 
sufficiently large finite fields of characteristic p and therefore over unramified extensions of Q p of all sufficiently 
large degrees. The primes of bad reduction are 2,3,5, and those dividing n. The point (i,0) on C-q„ is 
defined over Q p for all p congruent to 1 mod 4, which includes 5 and all primes dividing n. It is also clear 
that there are real points on C-e n - As a result, the only primes that need to be considered are 2 and 3. One 
checks (for example, using the IsDef icient command in magma) that C-en is deficient at those primes. It 
follows that C_6n is even. □ 

We now start to show that V has no rational points, from which it follows that S is not in the image 
of the global 2-descent map. First we will limit the set of primes to be considered in the calculation of the 
Braucr-Manin obstruction, then we will explain how to calculate the invariants there, and after that we will 
actually compute the invariants. 

Lemma 3.2.10 Let W be a variety over Q with good reduction at p and let s G BrVK. Then the local 
invariant of s at p is constant. 

Proof. This is a weaker version of Theorem 1 of [5]. □ 

Lemma 3.2.11 Let W be an elliptic surface over Q with an Azumaya algebra s given by cores(c, t — a) as 
in Proposition \3.1.1(A Let p be a prime of good reduction for W such that the fiber at infinity of W has 
smooth Qp-rational points (in particular, this is true if the fiber at infinity has good reduction mod p). Then 
the local invariant of s at p is equal to 0. 

Proof. By Lemma [3.2.101 the local invariant is constant, so it suffices to evaluate it at one point. Since 
the fiber at infinity has smooth Q p -rational points, so do all sufficiently near fibers. In particular, for all 
sufficiently large integers k the fiber at p~ 2k has rational points, and the local invariant is therefore 



But p 2 — a is a square in all completions at primes above p for all sufficiently large k, and hence the local 



Lemma 3.2.12 Let W be an elliptic surface over Q with an Azumaya algebra cores(c, t — a), where c has 
square norm. Suppose that the valuation of ot/Ap n is positive at all primes above p at which c is not a square. 
Then the invariant at p is on all fibers of coordinate t where v(t) < n. 

Proof. We notice that t/(t — a) is a square for all t with v(t) < n, and therefore that the invariants of 
(c, t) and (c, t — a) are equal at all primes above p where c is not a square. They are also equal at primes 
above p at which c is a square, being both equal to there, so they are equal at all primes above p. Thus 
the invariant at p of cores(c, t — a) is equal to that of cores(c, t) (see Proposition 13.1. 12")) . But this is equal 
to the invariant of (N(c),t), which is because N(c) is a square. □ 

Lemma 3.2.13 Let to G Q p and n G Z fee such that p"/4(io — a) has positive valuation in Q(a) p for all 
primes p above p where c is not a square locally. Then the local invariant of the Azumaya algebra cores(c, t— a) 
is the same for all values oft in the disc to + p n 1> p . 




invariant is for sufficiently large k. 



□ 
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Proof. It is sufficient to show that (t — a)/ (to — a) is a square for all t £ to + p n 7L v at all primes p above 
p where c is not a square. But this is equal to 1 + kp n /(to — a) for some k £ Z p , which by assumption is 
congruent to 1 mod 4p. It is therefore a square by Hensel's lemma. □ 

Lemma 3.2.14 It can be effectively determined whether there are Q p -rational points ofV mapping under a 
given fibration to a given disc D in P 1 (Q p ). 

Proof. By changing coordinates, we may assume that the disc is {(Z p : 1)}. Consider the graph of the 
fibration as a subscheme of P 5 x P 1 . It is sufficient to determine whether there is a standard affine patch A 5 
of P 5 such that the intersection of the patch A 5 x D of P 5 x P 1 with the graph of the fibration has Z p -points. 
Since the graph is smooth, this can be determined using Hensel's lemma. □ 

Theorem 3.2.15 Let V be a smooth variety with an elliptic fibration tft over P 1 satisfying the hypotheses of 
Proposition 1 3. 1 . TU\ and let cores(c, t — a) € Br <j> be the Azumaya algebra constructed there. Let p be a prime. 
Then the set of values of the local invariant of cores(c, t — a) on V (<Q P ) can be effectively determined. 

Proof. Using Hensel's lemma or Lemma \'3. 2 .141 we can check whether V has any Q p -points. If not, then we 
are done, so we may assume that V has Q p -points. If V has good reduction at p, then by Lemma \3 . 2 . 1 01 1 he 
local invariant cores(c, t — a) is constant, so it suffices to evaluate it at one point of V. Since V is nonsingular, 
its Q p -points are dense, so we can find a point for which t — a is bounded away from and oo. It is then 
easy to compute the local invariant there. 

We will describe the algorithm for calculating the values of the local invariant of cores(c, t — a) at a prime 
p of bad reduction for V and then prove that it terminates. The point is that this local invariant turns out 
to be locally constant. In fact, wc will show how to find an explicit finite covering of P 1 (Q P ) by discs in the 
p-adic topology, such that for each disc the invariant is constant on the set of Q p -points on V mapping to 
that disc under the elliptic fibration. 

First we show that such a disc exists around each point in P 1 (Q p ), starting with the point at infinity. 
After a change of variables we may assume that the fiber at t = oo is smooth over Q p . If the fiber at oo does 
have points over Q p , then by Lemma 13.2.121 wc can find an n such that the local invariant is on all points 
on fibers above t with v(t) < n. In this case the disc v(t) < n has the desired property If the fiber at t = oo 
does not have any Q p -points, then there is a p-adic neighborhood of oo € P 1 (Q P ) above which there are no 
Q p -points cither, so the invariant is clearly constant above any disc contained in this neighborhood. 

Now observe that, by Lemma [3.2.131 every finite to has a suitable neighborhood except for those that 
are roots of the minimal polynomial of a, so we are reduced to considering the finite set of these to- Here 
the argument will be more subtle. Fix such to and let p be the corresponding place of Q(a), so that the 
completion map p: Q(a) Q(a) p sends a to to. Here we used the obvious embedding Q p ^ Q(a) p , which 
is an isomorphism as a is contained in Q p . 

First consider the case that the fiber above t = t n = p(a) does have a point P over Q p = Q(a) p . Then P 
must be a smooth point of the Q (a) p -component it lies on, because by hypothesis each Q(a)-component is 
smooth. Therefore the geometric component on which P lies is defined over Q(a)« — Q P , so by hypothesis 
all geometric components of the fiber at t = to = p{a) arc defined over Q p , which means that p(c) is a square. 
For all other places q above p the embedding Q p Q(a) q does not send to to a, so we can find an integer n 
such that under each such embedding the clement p n /A(to — a) has positive valuation in Q(a) q . By Lemma 
13.2.131 the invariant is constant above the disc to +p n 1ip. In the implementation of this algorithm it will be 
useful to remember that c is a square in Q(a) p , as this implies that the local invariant corresponding to the 
place p is globally. In the case that the fiber above t = to does not have any Q p -points, there is a p-adic 
neighborhood of to <G P 1 (Q P ) above which there are no Q p -points either, so the invariant is constant above 
any disc contained in this neighborhood. 

The algorithm is as follows. First apply a change of coordinates to P 1 if necessary, so that the fiber 
at infinity is smooth. Then find a neighborhood of infinity above which the local invariant is constant. 
This reduces to considering t in some set of the form p n 7L v . For each t that maps to a in Q(a) p for some 
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place p above p, find an appropriate disc around to- In doing so we may find that the value of the local 
invariant corresponding to some p is for all Q p -points of V. Such p can be ignored in the remainder of 
the computation. If there arc points above any of the discs found thus far, compute the corresponding local 
invariants. 

We now divide the remaining region of P 1 (Q P ) into discs and place them in a queue, recording which 
local invariants we already know to occur. For each disc, we use Lemma 13.2.131 to try to discover that the 
local invariant is constant there. If it is, and if the local invariant is already known to occur, the disc may 
be ignored, as the conclusions do not depend on whether there are rational points there. If it is, and if 
the local invariant is not already known to occur, we use Lemma 13.2.141 to test whether there are rational 
points in that disc. If there are rational points on the disc, we record that the invariant on the disc occurs. 
The only possible values of the invariant of an element of Br V/ BrQ of order 2 are 0, ^ £ Q/Z; if both of 
these are now known to occur, we are done. On the other hand, if the local invariant is not constant on the 
disc, we divide it into p smaller discs and add them to the end of the queue. In other words, we perform a 
breadth-first search. The reason for using breadth-first rather than depth-first search is that local invariants 
are more likely to be different on relatively distant points of a p-adic disc, so breadth-first search will tend 
to find different invariants more quickly. When the queue is empty we are done and have recorded all values 
of the local invariant. 

Now we show that this algorithm terminates. It could fail to do so only if there is an infinite descending 
sequence of discs above which there are rational points but in which the local invariant is not constant. Let 
to be the unique point in the intersection of the discs. Then we have shown before that there is a disc around 
to on which the local invariant of cores(c, t — a) is constant, which is a contradiction, so the algorithm does 
terminate. □ 

Remark 3.2.16 This theorem is somewhat special to our situation. If the Azumaya algebra were con- 
structed using fibers of type I2, for example, this proof would not apply, and indeed in this case the local 
invariant associated to a place p above p need not be locally constant on P 1 around a to that maps to a in 

Let us now show how to apply this algorithm in our example. 

Proposition 3.2.17 The Brauer-Manin obstruction blocks the existence of rational points on the K3 surface 
V corresponding to (/, 5) . 

Proof. The surface V is defined by the equations qi = 92 = 5.3 = 0, where 

q-y = x\ + 2x1X3 + 8x1X4 + IOX1X5 + 2Ax\Xq + x\ + 8x2X3 + 10x2X4 + 24x2X5 + 58x2X6 + 5xg + 24x3X4 
+ 58x3X5 + 152x 3 x 6 + 29x4 + 152x 4 x 5 + 346x 4 x 6 + 173x5 + 856x 5 x 6 + 1017xg, 

<72 = X1X2 + 2.X1X3 + 3.X1X4 + 6X1X5 + YlX\Xo + x\ + 3X2X3 + 6X2X4 + 17X2X5 + 40X2X6 + 3x3 + 17x3X4 

+ 4OX3X5 + 97x3X6 + 2OX4 + 97x4X5 + 230x4x 6 + II5X5 + 563x 5 x6 + 675x6, 
(73 = 6x1X3 + 8x1X4 + I2.X1X5 + 30xixe + 3x'2 + 8x2X3 + 12x2X4 + 3OX2X5 + 84x2X6 + 6x3 + 3OX3X4 + 84x3X5 
+ 192x 3 x 6 + 42x^ + 192x4x5 + 466x 4 x 6 + 233X;; + 1112x 5 x 6 + 1360x^. 

The primes of bad reduction of V are those dividing the discriminant of /, namely 2, 3, 5, and those involved 
in S, which are again 2,3,5. Each of the fibrations is defined by two alternative pairs of linear forms (see 
Lemma \2 . 3 . 5 1 and following remarks). We let 

h = xi + 13x3 + 17x4 + 68x5 + 123x6, 

12 = X2 — 16x3 — 19x4 — 84x 5 — 145x6, 

13 = 2x2 — 8x3 — 8x4 — 42x5 — 68x6, 

Z4 = — X\ — 4X2 + 9X3 + 5X4 + 46X5 + 61X6, 
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and then one of the fibrations, which we will denote by Fx, is given by (li : I2) or (Z3 : I4), while the other, 
which will be written F2, is given by (lx : I3) or (1 2 : 1 4). To verify that the two sets of defining equations for 
each Fi give the same map, note that Ixh — hh = —Qi — + 13- We have already seen that Fx satisfies the 
hypotheses of Proposition 13.1.101 now we calculate the local invariant of the associated Azumaya algebra 
by means of the algorithm described in Theorem 13.2. 151 We will show that this Azumaya algebra has local 
invariant 1/2 at 2 and at all other primes; the energetic reader may wish to verify that the Azumaya 
algebra corresponding to F2 has local invariant 1/2 at 2, 3, and 5, and local invariant elsewhere. 

Thel 4 -fibers of Fx lie over the point (129r 3 + 187r 2 + 285r-1469)/449, where r 4 -12r + 13 = 0. The fact 
that this extension is totally complex implies that the local invariant at 00 is 0, because that local invariant 
is the sum of local invariants of central simple algebras over C. The components of these fibers are defined 
over the extension Q(r, y/c) where c = — 6r 3 — 9r 2 — 12r + 57 (note that actually c has minimal polynomial 
r 2 — 6r + 18, so c e Q(i), as expected from the proof of Theorem 13. 1.14[) . 

The fiber at 00 is the vanishing locus of the polynomials 

xx + 55.T3 + 71x 4 + 290x 5 + 519x 6 , 
X2 — I6.T3 — 19x4 — 84X5 — 145X6, 

x\ + 414x 3 x 4 - 4538x3x5 - 5876x 3 x 6 + 448x^ - 3796x 4 x 5 - 4200x 4 x 6 - 23754x 2 - 73732x 5 x 6 - 56083X 2 ,, 
7596x3x4 - 83956x 3 x 5 - 108804x 3 x 6 + 8241xJ - 70306x 4 x 5 - 77950x 4 x 6 - 438959x 2 - 1362754x 5 x 6 - 1036791x^, 

and it has good reduction outside 2,3,5,397,449. This can be checked either by a Groebncr-basis compu- 
tation or by embedding the fiber in P 3 as the curve defined by two quadrics Qx,Q2 and observing that the 
curve is nonsingular away from primes dividing the discriminant of det(£Mi + M2), where Mi and M2 are 
the symmetric matrices corresponding to Qi, Q2- By Lemma l3. 2.111 the local invariant at every other prime 
is 0. We examine these primes in turn. 

First we consider p = 2. We find that there are no rational points in the fibers over t with V2(t) < 1. In 
fact, none of the affine patches of the graph of the fibration (see Lemma [3?2T4]) has points mod 2 3 for such 
t. On the other hand, the point [1:0:5:3:6:1] modulo 8 can be lifted to a 2-adic point on the fiber at 
0. Let us show that the local invariant is 1/2 above all t with 1*2 (i) > 2. Indeed, by Lemma T3. 2. 131 it suffices 
to consider t — 0,4. There is one prime p of Q(r) above 2, and it is totally ramified. Therefore it suffices to 
show that the conies x 2 — (t — a)y 2 — cz 2 are not solvable at p for t = 0,4. In both cases this can be checked 
modulo p 5 . 

Next we consider p = 3. This time we find that there are no rational points in fibers above t with 
V3(t) < —1, and that this can be checked modulo 3 2 . However, the point [8:0:7:4:2:1] modulo 9 can be 
lifted to a 3-adic point on the fiber at 4. Let us show that the local invariant is above all t with va(t) > 0. 
Again, by Lemma r3.2.13l it suffices to consider t = 0, 1, 2. There are two primes of Q(r) lying above 3, both 
unramified of degree 2, and c has valuation 1 at both. On the other hand, a has valuation at both primes 
and a is not congruent to any integer modulo either prime. Furthermore, 2 — a is a square at both, while 
—a and 1 — a are squares at neither. In particular, it follows from Lemma 13.1.91 that the local invariant at t 
is above all t e Z 3 . 

For p = 5, the computations are simpler, because c is a square at all primes of Q(r) lying above 5. Indeed, 
there is one ramified prime at which the completion is isomorphic to Qs(v / 5") and c is congruent to 4 mod 
y/5, and one unramified prime of degree 2 at which c is congruent to 2 mod 5, which is a square in F25. Thus 
the local invariant is above all t £ P 1 (Q5). 

Finally, we need to consider the primes where V has good reduction but the fiber at infinity has bad 
reduction, namely 397 and 449. Note that c is a unit at every place above 397. Also, for every point P 
whose image tp in P 1 is not congruent to a mod any p above 397, the difference tp — a is a unit at all p 
above 397. Proposition 13.1.91 then shows that the local invariant of (c,tp — a) is at all such p, so that the 
local invariant of coves(c,tp — a) is by Proposition 13.1 .T2l every Q 3 9 7 -point on V whose reduction mod p 
does not lie on an J 4 -fiber will have local invariant 0. Over F 3 g7, the I 4 -fibers lie above (47 : 1), (144 : 1), 
(224 : 1), (379 : 1) (the first coordinates are the roots of the minimal polynomial of a in F397). Since V has 
good reduction at 397, every F397-point on V lifts to a (Q>397-point, so it suffices to verify that the F 3 g7-point 
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(246 : 16 : 98 : : 1 : 0) maps to (0 : 1) by Fx. But by Proposition 13.2. 101 it follows that the local invariant 
at 397 is identically 0. 

To prove that the local invariant at 449 is 0, it is enough to check that c is a square at all places of Q(r) 
above 449: indeed, it is congruent to 204 or 251 at all of these places. Alternatively, it can be verified that 
the fiber at infinity contains a (Q^g-point lying above (246 : 105 : 375 : 347 : 1 : 0). This completes the 
proof. □ 

Theorem 13.2.11 now follows by combining Propositions 13. 2. 41 13.2.51 13.2.61 and 13.2.171 



3.3 The Richelot isogeny 

Following a suggestion of Nils Bruin and Victor Flynn, we now study the interaction of the element of 
III constructed in Theorem 13.2.11 with the Richelot isogeny on the Jacobian. A Richelot isogeny (cf. [7J , 
chapter 9) is an isogeny of the Jacobian of a curve of genus 2 to that of another curve whose kernel is a 
maximal isotropic subgroup of the 2-torsion. Given a curve of genus 2 with Weierstrass points Wx, ■ ■ ■ , We, 
such subgroups consist of and three divisors of the form W% — Wj such that no Wi appears in more than 
one of them; since Wi — Wj = Wj — Wi in the Jacobian, they correspond to partitions of the Weierstrass 
points into two pairs. Letting the equation of the curve be y 2 = f(x), where deg/ = 6, the Weierstrass 
points are (£j,0) where Si is a root of /, so such partitions correspond to factorizations of / as products 
/1/2/3 of three quadratic factors. The isogenous curve is then defined by the equation y 2 = 0171(7233, where 
g. L = fi+ifi +2 — f'i+xfi+2> indices are read mod 3, and c is the determinant of the matrix of coefficients of 
the fi ([7J, sect. 9.2). Observe that multiplying one of the fi by a constant k multiplies c, <?i+i, and gi+2 by 
k. This is compatible with the evident fact that if C is isogenous to C then the twist of C by k is isogenous 
to the twist of C by k. In particular we find that the Jacobian of the curve 

C t :y 2 = t(x 2 + l)(x 2 -2x- \){x 2 +x-l) 

is isogenous to that of 

C'_ t : y 2 = ~t(x 2 + l)(x 2 + 2x - l)(x 2 - Ax - 1) = -tgx(x)g 2 {x)g 3 (x) = -tg(x). 

In addition we observe that there is only one rational Richelot isogeny on each of these curves, because 
the 2-torsion points that are not rational are defined over extensions of degree 4. A Galois-stable subgroup 
containing such a point contains four elements other than the identity, so it cannot have order 4. It follows 
that the only rational maximal isotropic subgroup is the one made up of the four rational points. From now 
on, we will denote the Richelot isogeny from Jac(C t ) to Jac(C^_ t ) by </> t . 

First we note that IH(Jac(C!_ 6n )) is also nontrivial for n in the set 5" described in Theorem 13.2. II 

Theorem 3.3.1 Let S be the set of primes described in Theorem \3.2.1{ Then for all n which are products 
of elements of S, the 2-part of the Tate-Shafarevich group of the Jacobian of the curve y 2 — —6ng(x) is 
nontrivial. 

Proof. The proof of this theorem is very similar to that of Theorem 13.2. 1[ except that one uses 6' = 
(3, 1 + s/2, (1 + VE)/2). Note that the field of definition of the lines of V g j' turns out to be the same as that 
of Vf t s, because —1 is a square in the splitting field of g. □ 

It is natural to ask whether these systematically-occurring elements of III are in the kernel of the map 
induced on Tate-Shafarevich groups by <j> n . It is not clear whether a general result can be obtained here. We 
will prove only that they are not in the kernel for the smallest case n = 1. To do so, we will calculate the 
Sclmcr groups of these isogenies, as in [T5], in the special case n = 1. 

We now sketch the method of [15] for calculating Sclmer groups. Let C be a curve and JacC its 
Jacobian. Let A be an abelian variety and </> : A — > J an isogeny from A to J. Let <f> be the dual 
isogeny from J to A. Then we find divisors D\, . . . , D r the union of whose Galois orbits spans ker</), and 
functions ipx , ■ ■ ■ , ipr such that the divisor of ipi is kDi, where k is the exponent of ker</> (here 2). The 



33 



functions ipi are defined over number fields K(Di); we use them to define an evaluation map from an open 
subset of C(K) to @i{K ®qK(Di))* for every extension K of Q, and hence a descent map 8$ t c from J(Q) to 
(BiK(Di)* I K(Di)* 2 ), extending the evaluation map from points of C to divisors supported on an open subset 
of C by multiplicativity. It is proved in [15] . Lemma 2.1, that this yields a well-defined map on the Jacobian. 
As in the usual descent procedure, the image is always contained in the subgroup of (BiK(Di)* / 'K(Di)* 
unramified away from 2, oo, and the bad primes of J. which are a subset of the bad primes of C (|15j. 
page 454). Provided that Schaefer's Assumptions I and II are satisfied, the Sclmer group Scl^ of <fi is then 
isomorphic to the subgroup of OiK / K (Dj)* 2 of elements unramified away from 2, oo, and bad primes 
of J which are in the images of the local descent maps at 2, oo, and the bad primes of J. Assumption I 
is satisfied because every rational divisor class on a curve of genus 2 is represented by a rational divisor, 
and Assumption II is satisfied because the natural map from A[tp] to /^(Q © Q) given by the Weil pairing 
is an isomorphism (this is because there is a Galois-invariant basis for ker 0, not merely a Galois-invariant 
spanning set). 

Definition 3.3.2 With notation as in the discussion above, the Tate-Shafarevich group III^ is defined to be 
Sel /^, C (J(Q))- 

Lemma 3.3.3 The Selmer group Sel^^ of 4> n is a subgroup of (Q © Q)*/(Q © Q)* 2 , and the descent map 
S(j> n ,c takes a K-point (x,y) of C n to (fi(x), ^(a:)) <G (K © K)*/(K © K)* 2 . For C'_ n the Selmer group is 
again a subgroup o/ (Q © Q)*/(Q © Q)* 2 , and the descent map corresponding to the isogeny dual to <f> n takes 
aK-pomt (x,y) of C'_ n to {g 1 (x) , g 2 {x)) € [K © K)*/(K © K)* 2 . 

Proof. We will only prove this for C n , the proof for C" being identical. Let D be a rational divisor class of 
order 2. Then D is represented by a divisor (a, 0) + (a', 0) — -Doo, where a and a' are roots of one of the 
quadratic factors of / and is the divisor of poles of the function x on the curve. It follows that 2D is 
the divisor of the quadratic factor of / whose roots are a, a 1 . The kernel of </>„ is isomorphic to (Z/2) 2 with 
trivial Galois action, so any two factors of / give functions whose divisors are doubles of the divisors that 
span the kernel. Since the factors are defined over Q and we use two of them, the description of Schaefer's 
procedure above states that the descent map and its target are as claimed. □ 

Proposition 3.3.4 There is an exact sequence 

J(Q p )[<t>]/<j>'(J'(® p )[2]) - J(Q p )/<t>'(J'(Q p )) -> J'(Q P )/2J'(Q P ) J'(Q p )/<f>(J(Q p )) 0. 
Proof. This is a special case of [15], Proposition 2.6. □ 

Theorem 3.3.5 The Selmer groups of the Richelot isogenics on the Jacobians of the curves y 2 = —6f(x) 
and y 2 = 6g(x) are isomorphic to (Z/2) 3 . 

Proof. Let the Jacobians of C_6 and C' & be denoted J and J' respectively. The Selmer groups of J and 
J' will be calculated together, because there is no obvious way to determine the size of J{Q P ) /(/>' (J 1 (Q P )) 
without computing the size of J'(Q p )/4>(J(Qp)) at the same time. We will compute them using Proposition 

The primes of bad reduction of both C-q and C' 6 are 2, 3, 5. Using [T5], Propositions 2.4 and 2.5, we can 
calculate the order of J'(Q p )/2J'(Q p ), the third nonzero term in the exact sequence of Proposition 13.3.41 it 
is 16 for p — 2, while it is 4 for p = 3, 5 and 2 for p = oo. It is easy to calculate that the first term of the 
exact sequence in Proposition l3.3.4l has order 4 for p — 2, 3, 5 and 2 for p = oo. For both curves the 2-torsion 
points map to (10, 2), (2, —2), and their product (5, —1) in SeL*, and Sel^, under S^^c and ^',c respectively. 
The sum of the dimensions of the second and fourth nonzero terms in the exact sequence must be equal to 
the sum of the dimensions of the first and third nonzero terms. For p G {3, 5, oo}, the sum of the dimensions 
of the images of the subgroups generated by the 2-torsion is already equal to the sum of the dimensions of 
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the first and third nonzero terms, so for these p the images of the 2-torsion points generate the local image. 
However, for p = 2, we need to find two additional generators. 

We check that there is a (Q>2(v6)-rational point on C-q with x-coordinate 3 + V6 whose image under Sr 
is (10, —2). Also, there is a Q2(v / 6)-rational point on C 6 with ^-coordinate 5 + v6 whose image is (10, —2). 
These new generators are independent of the image of the 2-torsion points of C_6 and C 6 respectively, so 
we have found the full Selmer group of the isogeny for both C and C . 



p 


C 


a 


2 


(5,1), (2,2), (1,-1) 


(5,1), (2, 2), (1,-1) 


3 


(1,-1),(-1,1) 


(1,-1), (-1,1) 


5 


(5,1), (2,2) 


(5,1), (2, 2) 


00 


(1,-1) 


(1,-1) 



It is now straightforward to see that the Selmer groups in both cases are generated by (5,1), (2, 2), (1,— 1). □ 

It follows immediately that the Selmer groups contain (1,-1), which is not in the image of the 2-torsion. 
We can now show that (1,-1) is in the Tate-Shafarevich group of the Richelot isogeny, from which it will 
follow that the elements of III found in Theorem 13.2.11 and Theorem 13.3.11 are not in the kernel of the map 
induced by the Richelot isogeny for n = 1. 

Theorem 3.3.6 The element of HI(Jac(C_6)) described in Theorem 1 3.2.11 is not in the kernel of the map 
on Tate-Shafarevich groups induced by the Richelot isogeny, and similarly for C 6 . 

Proof. We will do this only for C, the calculations for C' being essentially identical. We will first represent 
that element as an explicit cocycle with values in Jac(C_6)[2], apply 4>, and show that the image is the 
nontrivial element (1,-1) in SeLy. 

Recall (Definition 13. 1 . 13f> that we write Si for the components of the image of S that gives the nontrivial 
element of HI(Jac(C_6ri)) under a fixed isomorphism Af <g> (Q> — > ®fQ in which Q[X]/(fj) corresponds to 
components 2j — 1 and 2j. Given a E Gal((Q>/(Q>), write s for the permutation of {1, 2, . . . , 6} induced by 
a on the Sj. By remarks in the proof of [15], Proposition 2.2 and in [T5] , section 2.5, we can write the 
element of III as a cocycle with values in ^(Af (g> Q)/ ± 1. As in the discussion preceding Lemma f2. 1 .101 we 
identify Af®Q with ffifQ with Galois acting by a (a\, . . . ,ao) = ( a a s -in\, . . . , CT a. s -i(6))- Indeed, the cocycle 
corresponding to the element of III constructed in Theorem 13.3.11 is the one that takes a G Gal(Q/Q) to 
a aja, where 

a = (y(<Mj)) = (1, 1, -3(1 + y/2), -3(1 - y/2), 3(1 + V5)/2, 3(1 - V5)/2). 

In particular, this cocycle, which we will denote z a , factors through Gal(F/Q), where F is as in Theorem 

Now let us write z a as a cocycle with values in J [2]. Following the description in [T5], section 2.5, we see 
that (r.; ) € Hz (L') / ± 1 corresponds to a 2-torsion point T on the Jacobian such that e(T, (Sj , 0) — (Si , 0)) = rj 
for all j from 1 to 6, where e is the Weil pairing. The rational 2-torsion divisors are and ((?2fe, 0) — (#2fc-i, 0) 
for k = 1, 2, 3. Since two 2-torsion divisors of the form (Si, 0) — (Sj, 0) have Weil pairing 1 or —1 depending 
on whether the number of points appearing in both counted with multiplicity is even or odd, the rational 
2-torsion points arise only from the following sequences of square roots of 1: 

(1,1,1,1,1,1), (1,1,-1,-1,1,1), (1,1,1,1,-1,-1), (1,1,-1,-1,-1,-1). 

We claim that the image of z a (a) under the pairing with the points (Sj,0) — (Si, 0) is one of these sequences 
corresponding to an element of the kernel of the Richelot isogeny if and only if a fixes a square root i of — 1 . 
Indeed, it is clear that the first two components of z a (o~) are always 1, while the product of components 3 
and 4 is 1 if and only if a fixes a square root of ^3^4 = —9, and similarly for components 5 and 6. 
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These points are the kernel of the Richelot isogeny, which therefore maps z a to a cocycle that factors 
through Q(z) and takes the nontrivial element of this Galois group to the rational 2-torsion point arising 
from the factor g\. This corresponds to the element (1,-1) of the Selmer group of <f>' '. To see this, note 
that is a square root of (1, —1), and the action of a multiplies by (1, 1) if a fixes i and by (1, — 1) 
otherwise. But the image of the 2-torsion point coming from g\ under the </>'-Wcil pairing is (1, —1), because 
the pullback of this point pairs trivially with the point coming from the factor /i on J and nontrivially with 
the point coming from f2- As a result, the image of z a under the Richelot isogeny corresponds to the cocycle 
tr->*(l,i)/(l,i). 

Recall from Definition 13.2.21 and Proposition 13.2.31 that the full 2-descent map Ac is a map from 
Jac(C")(Q) to Q[X]/(g). Composing Ac with an isomorphism from Q[X]/(g) to ef =1 Q[X]/(^) obtained 
from the Chinese Remainder Theorem, we see that the map takes a point (xo, yo) to (xq — pi)| =1 ; in other 
words, its components are defined by the functions x— pi. We remark that g\ = N(x—pi) and gi = N(x— p%)- 
It follows that if P is a point of Jac(Cg), then the image of P under £r,c") the descent map for the Richelot 
isogeny, is the norm of the first two components of its image under Ac • 

However, using magma's TwoSelmerGroup command to compute the fake Selmer group, it is easy to 
verify that the norm map from the fake Selmer group for full 2-desccnt to the Selmer group of the Richelot 
isogeny is an isomorphism for C' 6 . It follows that the image of an element of ffl(Cg) cannot be the image of 
a rational divisor, so (1, —1) belongs to the Tate-Shafarevich group of the Richelot isogeny on C 6 . □ 

Remark 3.3.7 This proof applies to any twist C' 6n , where n is a product of elements of the set S described 
in Theorem l3.3.11 for which wc know that no rational point on the Jacobian of C' 6n maps by 8r to (1, — 1). 
However, there is no reason to expect this to be true in general; if the rank is large, it is very unlikely that the 
fake Selmer group for multiplication by 2 would be isomorphic to the Selmer group of the Richelot isogeny, 
and the proof would fail. 
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